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PART I. - CRYPTOGRAPHIC SYSTEMS . 

' SECTION' I. 

INTRODUCTORY REMARKS . 

Paragraph 

RfisumS-of preceding information . ..... ... ............ 1 

Sequence of study * S 

1. Resume of preceding information. .- su In Special Text No. 165, 
(1931)., .Elementary Military Cryptography, the student was given his first 
introduction to the, study of the more 'Simple means and methods of secret 
writing* Considerable attention was devoted to certain preliminary data 
in the nature of definitions of basic terms employed in cryptography, and 
of the general circumstances surrounding the -use of cryptography in mili- 
tary comnxunications. Th.e factors determining the influence or effect that 
the analysis of military cryptograms- will have -on the tactical situation 
were discussed somewhat in detail, and it was shown that of these factors 
the most important is the degree of cryptographic security inherent in the 
•cryptographic. system itself .This was then discussed in. detail in connec- 
tion with related, factors involved in' the length of time required to golve 
military cryptograms. Attention wab also directed tp information bearing 
upon the employment of cryptography-in:our Army, and thp functions, duties, 
•and responsibilities of the various arms and services concerned' in it were 
’Set forth.; Coming then to a discussion of certain preliminary details of a 
■practical nature, it was shown that systems. suitable for military use must 
conform to certain more or less rigid requirements before they can even be 
considered for such vise because of the present-day. limitations of the art 
Of signal communication In general* .. ,. . 

* h.. Having, assimilated all the foregoing; data of an introductory 

nature,, the- student then took up the study of the two principal classes 
i pf. cryptograms, transposition, and substitution. Various examples of 
cipher systems of the transposition class were, first illustrated, these 
starting out with the simplest varieties of ponoliteral route transposition 
and then progressing through more complex types of - simple columnar and key- 
word columnar methods. Only a hint was. conveyed as to the existence of 
far more, complicated double and triple transposition, systems. The prin- 
cipal disadvantages of transposition methods in general were discussed. 

Then substitution systems were taken up and after a brief discussion of 
the nature of alphabets in general and of the kinds of cipher alphabets 
in particular,' -a few examples of simple, mono alphabetic substitution ci- 
phers were given. Methods of producing mixed alphabets were illustrated, 
and the use of sliding basic sequences to derive a set of secondary alpha- 
bets was described. • Cases, of monoalphabet ic substitution with variants 
were presented and their disadvantages from the point of view of crypto- 
graphic security were discussed. It was stated that despite a multi- 
plicity of values for cipher equivalents, such methods do not yield crypto- 
grams of a high degree of security, and for this reason other methods of 
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producing a multiplicity of values, based upon true polyalphabetic methods, 
are more satisfactory* The use of cipher .disks and cipher tables of various 
sorts was discussed in connection with more complicated types of substitu- 
tion, and their disadvantages pointed out. Mention was made of methods of 
increasing the degree of cryptographic security by suppressing or elimina- 
ting the manifestations of periodicity in polyalphabetic systems based upon 
the use of a repeating key. These led to a consideration of the development 
and use of cryptographs and cipher machines, a few of which were merely men- 
tioned.' t ..... 

c. The category of substitution methods under the heading of code 

systems was then discussed and examples of the various types of code words 
and codebook arrangements given. . It was emphasized that at the present 
time code methods of cryptography predominate in our Army, and the reasons 
for this situation outlined:. This involved .a comparison of the advantages 
and disadvantages of cipher and code methods from the point of view of 
simplicity, rapidity, practicability, -secrecy, accuracy, and economy. Con- 
siderable attention was devoted to the. secrecy requirements of a crypto- 
graphic system for military use., and it was pointed out that at present good 
cfie systems offer greater advantages in this re spect than do those cipher 
systems, which may be regarded. 'as> being. sufficiently practicable for military 
use. . • • ' ’ 

d. There then followed ; a brief discussion of the errors which are 
almost inevitable ’ in cryptographic coiimmication ,' and of methods for their 
suppression and elimination. Finally, a summary of the fundamental rules 
for safeguarding cryptograms was .presented. 

_e. With the foregoing as a b® ck 6 r °und, a review of whibh. is rec- 
ommended, the student' is in a position no.w to take up the study of more 
advanced cryptographic methods. Special emphasis is to be laid upon only 
such systems as are practicable for military use. It is necessary to add 
that viewpoints are always undergoing change: what is regarded as wholly 

impracticable today, may, through some unforeseen, improvement in technique, 
become feasible tomorrow, and it is. unwise to condemn a system too hastily. 
For. example, before the World . War, and indeed for the first two years of 
that conflict, the use of codebooks in the theatre of operations was re- 
garded as wholly impracticable. Colonel. Hitt in his Manual for the solu- 
tion Of Military Ciphers , published in 1916, says: 

"The necessity for exact expression of ideas 
practically excludes the use of codes for military 
work, although it is possible that a special tactical 
code might be usqful for preparation of tactical orders." 

Also, in an official British. Army Manual of Cryptography prepared in 
1914 is found the following statement: 

* "Codes. will first be considered, but as they dc 

not fulfill the, conditions required of a means of 
secret communication in the field, they need not be 
dealt with here at length." 
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It need only be pointed out in this connection that today code methods 
"predominate in the secret communication systems' of the military, naval, 
and diplomatic services of practically all the large nations of the world. 
Feverthelpss, it’ is likely that within the next decade or two the pendulum 
may oncje. p\or_e swing bVer* to- the- other, position and cipher methods . may again 
come ta .the fore,' especially if menhanip.al and* electrical cipher machines 
are perfected so* t"hat 'ttrerir operation .becqnes practicable for general use. 

It is, fg^.. this ’reasdri,* 'if 'for no .other, that ’the cryptographer who desires 
to keep, abreast of ‘progress 'must -devote considerable attention to the more 
complicated cipher - methods of the past and present 'time, ' for with. the .in- 
'■trodnctlon of mechanical and electrical devices the complexities and dif- 
ficulties of. these hand-operated: methods may. be eliminated. As an instance 
: of this,. there may be cited a method of cryptography .Which is purely mathe- 
matical- jLn. character and which 'S3 bo complicated when operated by hand that 
its use; as. a military' cipher would he .practically impossible ; yet , a : mechan- 
- i-cal deyloe .-for. performing the mathematical operations involved in cryptograph- 
ing : and- dapryptographing can be constructed, . and a compact’, efficient machine 
based upon the cryptographic principles involved, may easily become a reality 
for field use. Consequently, if among the methods to be set forth herein 
•certainj ones .appear to s the student to fall outside the realm of what is today 
: considered; prscticabiey it - should he -remembered jbhat the purpose in describing 
them .1$ .to .present for his "consideration .-various 'ba'sic' 'cryptographic princi- 
■ - ' ples^ end-nqt topet forth methods .that may. witii a high degree of probability 

; be -encountered -in .military - cryptography : in .the immediate futurev ■ 

2. Sequence of’st'iidy. -^lust-as in the : preceding 'text, -transposition 
systems will first be discussed, then substitution systems Considerable 
attention will her fdefbt edit© combined substitution and transposition methods. 
Following wiil' coife:, 'a; description of a limited number of cryptographs 

of the more oofl?>lex type , ' tpgether with a discussion of their present-day 
limitations..' ■fherpafter., Asmall amount of space will - be devoted to code 
systems, with special emphasis upon enciphered. code systems. Finally, there 
will foll6w a..disoussion pf ’a Signal Corps service called the Signal Intelli- 
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A. TRANSPOSITION SYSTEIE 
SECTION II. 

MONOPHASE TRANSPOSITION SYSTEMS- -■ 



Transposition systems employing geometric designs ........ 

Trapezoidal dfes igns ...................................... 

TriahgUlS'r designs . ... . . i.- ............ . .. ........... ► . *• 

Diagonal methods ... . . . . ... . . . . . . . .... .-. .... ... .... ..... . » • 

Interrupted keyword transposition : 

Permutation method ., . * » .-. . .1. ; . *■ 

Transposition methods using special figures ...... 






Paragraph 

3- 

4 ’ 

5. 

6 

7 

8 
9 



3. Transposition systems ' employing geometric designs -. In the pre- 

ceding text brief mention was made of the use of geometni-e. designs and 
figures other 'than rectangles in producing, transposition /ciphers. It was 
stated that triangles, trapezoids, and polygons of- various symmetrical 
shapes can be employed. Figures of these types form: connecting, links bet- 
ween the methods- that use simple rectangular- designs and the more complica- 
ted methods that use figures in which transposition takes place along, di- 
agonals; 1 ’ ■ •• 

4. : Trapezoidal design's. — _a . ' A- trapezoid, or , more- accurately,, a 

truncated triangle, of prearranged dimensions es- regards the number of , cells 
(which in this case are rhombs) into which.it is to be partitioned, is con- 

. structed. There will be left on one side of the design a series of small 
triangles which are not to be used for inscribing letters, and are therefore 
crossed off in the design, as shown in Figure li/. Only two agreements are 
nece ssary in order to ■ .-•- :>,• i 

fix the ■ dimensions of 
the- design a' keyword : 
or keyphrase t o deter- 
mine the; number of cells 
at the' base : of the -de- '* 
sigh, and an understand- 
ing as to the height of 
the design expressed in 
number of cells. The 
successive horizontal 
rows of cells will de- 
crease by one in number 
from bottom to top of the 
design. In Fig. 1, the 

keyphrase, NO CANDY FOR ISSUE, is used as a basis for deriving a numerical 
key of 15 elements, and it is assumed that by prearrangement it was agreed 
that the height of the design should be eight cells. Therefore, the bottom 
row has 15 cells, the next one upwards, 14, the next, 13, and so on, to the 
last, with 8 cells. The inscription may follow any route agreed upon; in 




1 8 3 15 5 75 H 6 12 13 34 4 
ANDYFORISSUE 

Fig. 1 
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the example, it follows the normal manner of writing. The transcription 
follows the numerical key order, yielding : this ; cryptogram: 

ODAIK AED1IE. HPODV ITEIP NftUET BOBRO 

. . r- 

H D T F S E.I S-IF I . E T B E F BCBTM E S H G A RTORD 

* ■ i , ’■ . * % 

IRERE A W A R R ' ESTNS IEPVR VASEO FTEDL 

. >■ . i\ 

. n a ; ; . 

• * '■ * s • r ' . v , . s 

b. De crypt ographipg is ifterely the revered .of . cryptographing, there be- 

ing no difficulties provided that .the design haS:b'een Correctly constructed. 
For this purpose cross-section papecr.wi^ be found "useful. The analysis of . 
such a cryptogram is somewhat complicated by "the- ‘presence of columns having 
varying numbers of letters; it may be further complicated by following com- 
plex routes in inscription. It is also possible to'follow a numerical key 
in the inscription of the plain text in horizontal lines; this additional 
procedure would further complicate and delay solution. 



5. Triangular designs. - a. The simplest Way Of drawing up an equi- 
lateral triangle for crypt ognaphing is to take cross-section paper, draw a 
square the . side of which is equal to the length agreed upon as expressed in 
the number of cells; and then 1 draw a diagcmal cutting the large square into 
two equal . triangles J ; This is shown in Mg. .2, where the length agreed upon 
is nine, i.e.j. nine' cells per side., The‘ letters of the. plain text are in- 
scribed in accordance' with any ( ■< ... . > • 

prearranged route,, the One ll-;/ . 

lustrated in Fig. 3 'being a : 7 

simple method wherein the let- \ ^ 

ters are inscribed, in horizontal ,. ‘ V ‘ V. A' A ... 

lines in- the normal manner . When ■ A \. 

so inscribed, the letters" in- the- < .. \ \ '‘V ^ A x 

diagram will: form 2n-l columns A Ay \ \ \ \ \ 

where n is the nuiiiber of cells . v-.V; \ \ 

forming one. of the aides of the . \ X \ 

' square from which thh triangle , 'y V'\ A 

has been constructed. The total .. .. ,V-\ A . -y"”\AY A ^ 

number of letters that' can be in- ■ . .. . ^ ; \ \ A '\ '• 

scribed within the triangle is . .. . V \ 

the sum of n + (n - 1) t (n - 2) '-' r \ '' ' Fig. 2 

+ (n - 3) + * 1. For a 

triangle based upon a side of 9 cells, the sum is 9*8 + 7 *6 + 5 + 4 + 3* 
2 * 1 = 45. The letters may then be transcribed to form the cryptogram by fol- 
lowing another route, or by following a derived numerical key applied to the 



- yV\ 

• v ' uy-.v 

• -A - A A -a 



\ A : \ 

\ > 
\ . -v 



- A-' 
-V'A . 

A A 



base of the triangle. A simple method of deriving a key of 2n-l elements from 
a key of n elements or letters is exemplified herewith. Let the key be 
DIAGGNALsT a word of nine letters. Extend this key to 2n-l places by repeti- 
tion, and then assign numerical values as usual: 



n ■ 9; 



2n - 1 = 17 
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1 — 2 — 3 — 4 — 5 — 6 — 7 — 8 — 9-10-11-12-13-14-15-16-17 
Keyword : DIAGON ALSDIAGONAL 

Numerical key: 5-9-1-7-15-13—2-11-17—6-10 — 3-8-16-14—4-12 

This numerical key is the one that has been employed in enciphering the message 
in Fig. 3. 




RICRCOCSGE D 0 OK I ' U AO OE SEYID RTISS 
... D T S 1T..R A UN.T N P E R T R 

... . .: .......... . Fig. 3 

, b... . By. a slight change in procedure it is possible to encipher a message 
and produce a text which, for. the sake of . accuracy in' special cases, is double 
the original length, but which is self-che eking. Suppose that instead of ap- 
plying a single numerical key to the base of the triangle, a double-length key 
is applied to the legs, as shown in Fig. 4. Here the key is TRIANGLES, ex- 
tended to double length by simple repetition, as follows: 

1—2 — 3 — 4— 5—6— 7—0— 9:-10-ll -12-13-14-15-16-17-18 
Keyword 1 : TR I A NGLES' TRIANGLES 

Numerical key: 17-13—7—1-11—5—9—3-15-18-14 — 8-2-12—6-10 — 4-16 

This key is applied to the legs of the triangle beginning at the lower left- 
hand comer. The transcription then follows key-number order, which results 
in doubling the length of the message but. the repeated letters are scattered 
throughout the whole message. In decryptographing such a message the clerk 
merely omits the second occurrence of a letter if it agrees (in identity) 
with its first appearance in the text. 



REF ID:A56930 



-7 - 




Cryptogram: 

UUSOC YNTSC REOYS 0 IT R E R ■ DRITI D T 0 G D 

RAKED RICSN C T R N I 01 IT F B A T C S R 0 S I I R 

S'lOE.I. RTDAI POE CO T i: I S S DP ROD AURSD 

Fie. 4. 

_c . Many variations. in inscription and transcription can be employed in 
the case of triangles as well as trapezoids. Some of the variations in the 
case of triangles are shown in. Fig. 5. .. 




Inscription: Up left side, down right, alternately. 

transcription:’ (a) In rows from the baseline, left to right and right 
to left, alternately, upwards: 

PISOS RNATU SIERS etc. 

(b) In diagonals from right leg, in key number order: 

R 113 D R OUAYN etc. 

(c) In rows from left leg, in key number order: 

CTGEO YTCEU etc. 

(d) From columns In key number order: 

CNR 01 ' TUGRU etc. 



Fig. 5 
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6. Diagonal methods, -a. A method involving diagonal transposition 
which is reported to have been employed 'by t^e French Army in the World War, 
is now to be described. A numerical- key is derived from a fairly long word 
or phrase, and a rectangle is constructed, as. in Fig. 6. The text is in- 
scribed in this rectangle .in norriiai, fashion, nulls being employed, if neces- 
sary, to complete the last line of the rectangle. 

b. The correspondents agree beforehand upon several diagonals which 
run from left to right, and from right to left and which intersect, thus cut- 
ting up the design :quite thoroughly . In Fig* 6 let .these selected diagonals 
be those indicated by' the numbers ifrom 1 to 6, inclusive, the odd ones indi- 
cating diagonals running from left to right. In the transcription, the let- 
ters along the indicated diagonals are first set down in groups of five, 
proceeding in key number order. Correspondents must also agree beforehand 
as to whether a letter which lies at the intersection of two diagonals will 
be taken both times it is encountered or taken only once end, if so,, whether 
on its first or second, appearance. After all these letters have been written 
down, one then proceeds with the remaining letters in the usual columnar man- 
ner, omitting the letters which have already been taken, or, again, if spec- 
ially agreed upon, repeating them every, time they are encountered. If the 
latter is done, the inclusion of such letters not only serves as a check upon 
accuracy but also materially increases the difficulties of solution, since 
in this case these' letters act, like nulls. The cryptographing process will 
become clear upon the study of the example in Fig. 6. 



Message: 



ENEMY BATTERY LOCATED AT. WOODS 1000 YARDS SOUTHEAST OF 
MUimSBURG HEAVY ARTILLERY STOP THEY ARE FIRING AT RATE 



OF THREE ROUNDS PER MINUTE FOR THE BATTERY X WILLS, M6.J. 
Keyphrase: MnNIGHT RIDE OF PAUL REVERE 

Enciphering diagram: . 



M I D IT I G H , T R ■ I D . E 0 F P A U L REV E R E 

15-11—2-16-12 — 9-10-22-19-15 — 3-4-17- — 8-18 — 1-23-14-20 — 5-24 — 6-21—7 

E N .il] 'll A 'T ■ T - E [El jli L O' C UJ T E , P (Xi T . 0 o" 

D | 0 F S T H 0 U S iAllil ' D Y A R Ipl S S _0 ' (Sj T H E 

Ly S T OF II U II _M [yl S B m R_ G . II E lA] v II! A 1 T I 

L L E R Y S T 0 !Pl T H E Y U| _R E F ' I @ I N G [I t JT 

R A T E 0. F T Ull R . E E R 0 U sQjj- D ^ Hi E. S M I M | 

T E • F: 0 R T ]Hj E B A T T E R Y B If] I L L H M A J 

Cryptogram: 

A D A R R S E S A R N U A IT X . Y A A P H HAIJRA, : UWYPW 

RHEDO TETFS H STB ,E. ... R T 0 II T G I’M 0 E I T J 0 

YRURB TMSFT A H U T T, N S L A S YEFYO RESTE 

AESII EDLRT MNORE Q L D Y 0 ECAGR YTUMR 

LOHTN ATOMO ETEFS 



Fig. 6 



B D S V E 



TAN M 
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7. Interrupted keyword transposition. - a. This method of trans- 
position is" a development of a more single method wherein the transposition 
follows a -numerical key. The latter must first he ’described. A keyword or 
keyphrase of fair length is selected and a numerical key derived from it. 

Let this key be the phrase UNIFORMITY OF METHOD. 

Key phrase : U N I F O H M I T Y 0 F. M E T : H 0 D 
numerical key: 17-10— 6— 3-11-14— 8— 7-15-18-12— 4— 9— 2-16—5-13— ;L 

The plain text is then written out in horizontal lines corresponding ..to the 
length of the key; then transposition is effected within each row, according 
to the sequence of numbers applicable, as shown in Fig. 7.. 

Message: ADMINISTHAT IVE ORDERS MUST- EE COMPLETED AND HEADY TO ACCOMPANY 

FIELD ORDERS NOT LATER THAN 5:00 P.M. THIS DATE. 

Enciphering diagram: 

17-10—6—3-11-14—8—7-15-18-12 — 4-9-2-16—5-13—1 
AD MINI STRATIVEORDE 
' R S II U S ! T B E C O MPL E-T E. D A . .. 

. "'N 1 ' D R E A D Y T 0 A C C O. M ,P A N ,Y 

4 F -I E L D O R D E R S N 0 T L A ■ T E 

"R T H A N F <T V E P M T H I S: D A T 

' . E. ! 

Cryptogram: 

EEIIR MTSVD NTDIR 0 A A A E UPEME BLSSM 

... 

D T C T R 0 Y M EC A R T Y 0 l‘?CB D. 0 P N A E ' T L N A E 

DROID S T 0 -3 L F R T I A T D H V I HMMA F E S R P 

E Fig. 7 

b. In the foregoing case the encipherment takes place only by trans- 
position within. rows', 'but .it is possible to complicate the- method by trans- 
posing, in addition, the rows as a whole, employing, the same’ key or only a 
portion of it, as much as is required. Thus, if the message contained 18 
rows of 18 letters each, then the transposition of rows could be effected 
according to keynumber order, the last row being taken first (since the num- 
ber 1 of the numerical key happens in this case to be at the end of the num- 
erical key), 1 the 14th row being taken second .(since, the number 2 of the num- 
erical key Is the '14th number)-, and -so on. ’.There the message does not contain 
as many complete rows as there are numbers in the key,' the transposition takes 
place in •keynumber order nevertheless, the rows being taken 'in the numerical 
order of the numbers present. Using the same key and message as in the fore- 
going cade, 'the encipherment would be as shoton in Fig.:. 8v ’ 



-REE — XIX:Jk 5 - 6 - 9 - 3 -Q- 
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Enciphering diagram: 

■ *r« Jf' * ^ . -e . , ; J- j . . . . ( . ... 

■ ■• ‘•'•I ' 3i7^l0-.-6~-5-ll-14~-8— 7-15-18-1E — 4-9—2-16—5-13—1 
17 t- -A D M 1“ H I S T R A T I V/E 0 R D E 

r : ' ;V ! R ■ S M U S T B ■ E C 0 M P L E T E D A 

6 : N D R E A D Y ’-T 0 A C C O M P A N Y 

3: FIELDORDERSNOTL ATE 

11 : R THANFlt EPMSfllSD A-"T 



: Cr^t5gramt- 

ETLNA EDROI DST 0 E' L PR Y M EC A R T ',Y 0 DA C 

• N »OP It A A E U P E M E B L SSMDT C T R 0 T • I A T D H 

VIHTN- M A F E S •' R P-E E E HR MI SVDNT DIROA 

A 




£. Frotii the preceding method it is but a step to the method of inter- 
rupted key 'transposition now to be described.. Instead of writing the text in 
regular-length groups corresponding to the length of the key, it is written 
out in irregular groups the lengths of which vary according to some prearranged 
plan.. For example, note the basis of the variable grouping in the following 
diagram, which uses the same message and key as under a of this paragraph: 



Enciphering diagram: 

17-10—6—3-11-14—8—7-15-18-12 — 4-9—2-16—5-13—1 
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c. 


c 


a a 


■ a-’ 


• . a 




• ‘ . r-;; 


■ 0 


M 


P 


A 


N 


Y 


F I ■ E 


L 


D 


0. 


R D 


E 


R 




■ ; ' # ; ■ j 


■ S 


N 


0 


• • 


a ' 


a - ■ 


a • a 


a 


■ a • 


a 


-a. 


.a 


• •• 




* . f 

i - . * .%/•.* i ■ >.it. : 


•-T 


L 


A 


T 


E 


R 


T. -H : . .. 


. - a • 


« \a ■ ■ 


.• a • 


• -* ■- • ‘m ."' 


.. a- 


■ a » 


/a ■ \a. 


t ;:oi r o'i:.; 


-A 


IT: 


F. 


• I 


V 


E ; 


P- . . 


/V 


a 


' • a • 


i.*:.. • *a - : 


' .a • 


■a ■ 




I • ms ■ *Ci( t :*■ i.. . J 

* J. l . . i/. t s; 


■ :m; 


T- 


- H. 


' I- 


s. 


D' 


A' T,' E 


{L, 


C 


E. 


P)*. 


' 4 







(*The four final letters MJEP are- nUHa, to complete the; row. )•. 

Fig. 9 
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Cryptogram (columnar transposition in key-number sequence): 



* 


E E 


E D 


I 


U A E 


A T 


III 


P c 


0 E a R M 


MDRPO 


A F H T E 




T I 


H T 


S 


BY? 


T P 


A V L 


H P 


D S E D M 


H L IT T N 


SASH 




S T 


M C 


D 


GDI 


I D 


y a e 


D R 


COE E 0 


E A R T N 


0 S T A U 



AO All 

Fig. 9 (Cont'd) 

d. This method may be combined with that -shown under b of this paragraph, 

thus further complicating the system. In decryptographing such a message it 
•is best to use cross-section paper, block out the cells to be occupied by let- 
ters in the deciphering diagram, and indicate the key numbers applicable to 
each line. This will facilitate the process materially and help eliminate 
errors. : '• 

e. Another method of interrupted transposition is that which employs a 
rather long sequence of digits to control the interruption. In order to avoid 
the necessity of carrying around such a written sequence, it is possible to 
agree upon a number whose reciprocal when converted by actual division into 
its equivalent decimal number will give a long series of digits. For example, 
the reciprocal' of 7, or l/7, yields a repeating -sequence of six digits: 
142857142857.,-. ; the reciprocal of 49, l/49, yields a repeating sequence of 

42 digits, etc. Zeros, when they appear, are omitted from the sequence. Sup- 
pose the number 19 is agreed upon, the reciprocal of which yields -the sequence 
(0)52631578947368421. On cross-section paper mark off sets of cells corres- 
ponding iu number to.; the successive digits. Thus: 




.. . Let. the message be ATTACK HAS BEEN POSTPONED. 
Encipherment: 




Cryptogram: 

A H E S 0 T A T S N I N D A B FCK20 PE 

f. To decryptograph such a message, the cryptogram is written down in 
-a series of cross- section -cel-la,- -which ar-e then blocked off - in sets according 
to the numerical key: ----- - — - - 



6 




-RE-F— 5-D-5-A5-6-93Q 
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Taking the letters in .consecutive order out of the successive sets, and 
crossing theta off the series at the sane tine -as they are. bOinglwritten 
down to construct .the plain text, the message is found to begin with the 
following two words': - ' r 




9 



h 



ATTACK HAS ... ‘ • 

Preparatory to crypt ographing, it is necessary to- find the length 
of. the message to be enciphered and then to mark Off as many ..cells as will 
be required for encipherment'. - Nulls are used to fill in cells that are not ■ 
occupied after enciphering the whole message.. The secrecy of the method de- 
pends, of course, upon the reciprocal selected, . but there is no - reason why .. 
any fraction that will yield a long series of digits cannot be employed. 

If the selection of key numbers were restricted to reciprocals, the secrecy 
would be more limited i-n scop'e than is actually necessitated by the method 
itself. •• 

8.- Perrnut-at i'bn method. - a.. An old method, known in literature as 
the aerial telegraphy method , forms the basis of this system. A set of 
permutations of.3,4, 9 digits is agreed upon and -these permutations are 

listed in a definite series. As an example,, let these .permutations be made 
of the digits 1 to 5,- selecting only four of the possible 120 . Suppose those 
selected are the following, set doto in successive lines .of the diagram in 
Fig. iO a. ’ ' ", 



Permutation 




Fig, 10 a 



The letters of the plain -text, taken in sets of fives, are distributed with- 
in the sections of the diagram in accordance with the permutations indicated 
above the sections and also at. the left. Thus, the first five letters of the 
text, supposing them to be the initial letters of the word RECOMMENDATIONS, 
are inserted in the following positions: 



Permutation 




by a system of semaphore signaling in practical usage in Europe before the 
electrical telegraph was invented. 
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The next- five letters, aye .Inscribed . in. the second, line Qf the diagram in the 
sections, indicated by, the; permutation above and at the .left of the line. Thus: 

• .Permutation . .. V * . * . . . ' 



pwy 




3 


1 . , 


.5 . 


4 




C 


R . 


M . 


0 


■ 


mSSSSm 


■ 2 , 




. X ....... . 


4 




E— — — 


fl 


M 


D . 



This process is continued for each line and for as many lines as there are 
permutations indicated at the left. • In the foregoing case, after twenty let- 
ters have been inserted, one inserts a second set of five letters again on 
the first, line, placing the letters of this second set immediately to the 
right of those of the first set, respectively in keynumber order. The suc- 
ceeding lines are treated in similar fashion until the whole message has 
been enciphered. The following example will illustrate the process: 

Message: ESC OM/ENDATI ONS FOR LOCATIONS OF NEW BALLOON POSITIONS 

HOST BE SUBMITTED BEFORE 12TH AIRDROME COMPANY CHANGES 

' r . * 

COMMAND POST TOMORROW. 

Enciphering diagram: 



Permutation 

■ — -T 



2 3 1 5 ’4 


2 s. 


3 


1 


5 


4 


E A S E 0 M 


C T I D M A 


R C 0 T R M 


M 0 I E C D 


0 I T B E N 


3 2 5 1 4 


. 3 .. 


2 


5 v 


1 • 


4 


N 0 S R P S 


E S 11 0 M 0 


A N U T N T 


MBOFOP 




1 5 3 2 4 


1 


5 


3 


2 


4 


T E S W Y 0 


S L S T N R 


0 B B L H 0 


IffTECM 


II A E F A R 


4 3 15 2 


4 


3 


1 


5. 


2 


L N I R C B* 1 


R 0 If I S C* 


F L U H G 0 


10 P T I) 0 D* 


0 0 B A E W 



*The letters B, G and D are nulls, to complete the figure. 

Fig. 10 b 



The letters of the cipher text are taken from the diagram according to any 



prearranged route, 
in groups of fives 


the most 
, thus : 


simple 


■being 


to transcribe 


the 


lines 


of letters 


E A S E 0 


M C T I D 


M A 


r q o 


T R M 1.1 0 


I E 


C D 0 


I 


T B E N 


ITO SRP: 


;S E. S IT 0 


M 0 


A IT U 


• .TNT M N 


OF 


0 P D 


F 


M.E A T 


T E S W Y 


0 S L S T 


N R 


OB B 


LH 0 I W 


T E 


C U N 


A 


E F A R 


LJI I R C 


B HO ME 


s . c. 


F L U 


H ..G 0 0 P 


T D 


0 D 0 


0 


B A E W 
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Tb. The foregoing method, when employed in its most simple form, does 
not yield cryptograms of even a moderate degree of seourity; but if the method 
of inscription and transcription is varied and made more complex, the degree 
of seourity may be increased quite noticeably. It is possible to use longer 
permutations, based on sets of 6, 7, 8, or 9 digits, but in every case the 
•successive permutations must be prearranged as regards both their, exact com- 
position and their order or arrangement . in the diagram. 

9. Transposition methods using special figures# - a. The method now 
to be described is useful only' in special cases vrhere the” correspondence is 
restricted to brief communications between a very limited number of persons* 

It is necessary, .to agree in advance on certain particulars, as will be seen. . 
let the message to be enciphered be the following: 

FOUR TRANSPORTS -TILL BE COMPLETED BY END OF APRIL AND SIX MORE BY 

END OF JULY. 

Note the following figures and encipherment: 




E B D P A I 




E E F I D ■ M 



R E - F Y 




Cryptogram: • 

ORPSL OFUTA SOT’JL BCMRN RIEPE BDPAI 

LTDYN OARLN SXEEF ID If RE FYOEY NOJLB 

D U 

Fig. 11 

b_. It will be noted that it is essential to agree in advance not only 
upon the nature of the figure but also Upon the number of figures per line. 

o> The next series is a modification of the preceding. The same message 
will be employed, with a double-cross figure, five figures per line. 
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0 * U P 0 L‘ B E T. DO 




Cryptogram; .. . «, 

* >, - y .. 

OUPOL BETDO FPSHL ELEN F if T IT P C - E D I A 

A R If S M OYBRP A IT RJE.F, - • J L D 0 B 0 U II S D YL'IIE 




Cryptogram: ■ ' 

F S L L N NO I ? P L E E I D AUWOM BYTRO RH S R 0 

E BE P F TTCDA LOOM A DRFXN N E JIB I BY U S 

YL • .... . 



Fig. 13 



o tJ 
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e. A figure of different form than- the preceding forms the basis of 
the next type. 





Cryptogram: 

OOEDR T0YR7 P IT I: L E F P B E U RCBTS M E A I L 

DSLT-F FRO PS BJIXE LOAOD ADEFR IYULM 

F Y 

Fig. 14 

t_. From the foregoing examples, it is obvious that many other figures 
may be used for effecting transpositions of this kind, such as stars of vary- 
ing numbers of points, polygons cf various symmetrical shapes, etc. It is 

merely necessary to agree upon the figures, the number of figures per line, 
the starting points of the inscription and transcription processes. 

g. The method lends itself readily to combination with simple mono- 
alphabetic substitution, yielding cryptograms of a rather high degree of 
security. 



SECTIOIT III. 

POLYPHASE TRAFSPOSITIOn SYSTEMS 



Qp al 

Polyphase transposition methods in general 10 

True and false polyphase transpositions 11 

True double transposition 12 



10. Polyphase transposition methods in general. - a_. In Paragraph 32 
of Special Text No. 165, brief mention was made of transposition systems in 
which two or more processes of rearrangement are involved. It was stated that 
only a very limited number of such transposition methods are practicable for 
military use, but that the degree of security afforded by them is considerably 
greater than that afforded by certain much more complicated substitution meth- 
ods. The methods referred to are those -7hich involve, two or more successive 
transpositions, and merely for purposes of brevity in reference they will here 
be called polyphase transposition methods to distinguish them from the single 
or monophase methods thus far described. 
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b.. It is obvious that a polyphase transposition method may involve 
2, 3, ... successive transpositions of the letters of the plain text. To 
describe these methods in General terms, one may indicate that the letters 
resulting ; from a first transposition, do' ignated as the T-l transposition, 
form the basis of a second, or T-2 transposition. If the process is con- 
tinued, there may be T-3, T-4 ... transpositions, and each may involve the 
use of a geometric figure or design. Fo convenience, the design involved 
in accomplishing the T-l transposition jm. / be designated as the D-l design; 
that involved in accomplishing the T-2 transposition as the D-2 design, etc. 
However, it- iaay as well be stated at this point that, so far as military 
cryptography - is concerned, methods which involve more than D-2 .and T-2 • 
elements are entirely impractical and often those which -involve no more - than 
D-2 and T-2- elements are also- • .impractical for such -use.- - - 

11. True and false polyphase transpositions.- - a.. * It- is possible to 
perform two or more transpositions with the letters of a text and yet the 
final cryptogram will be no more difficult to solve than if only a single 
transposition had been effected. The equivalent of this in. the case of 
substitution ciphers is to encipher a mono alphabetic cryptogram’ by means 
of a second single alphabet: the final result is still a monoalphabet ic 

substitution cipher. Likewise, if a’ message has been enciphered by a 
simple form of route transposition and a ~econd and similar or approximately 
similar form of simnle route transposition is again applied to the text of 
the first transposition, the fina? text is still that of a monophase trans- 
position cinher. Again, two transpositiohs may be accomplished without 
really effecting a most thorough scrambling of the letters composing the 
original text. Examples will serve to clarify the difference between false 
and true polyphase transposition. . 

_b. Uote the following simple columnar transposition cipher prepared 
according to the method described in par graph 26 of Special Text lie, 165: 

Message: DELIVER ALL AJJTIUTTITICN TQ 4111 DIVISION DUMP 

Keyword: SCHEDULE = ■ S C H I D U L " 

7-1 -5-3-2 -8-6- ... 



Enciphering rectangle: 



7 


i 


5 


3 


2 


8 


6 


4 


KH 


m 


m 


H 


V 


m 


m 


C9 


m 


m 


m 


M 


M 


JLj 


N 


El 


mm 


m 


a 


m 


H 


El 


o 


El 


mm 


Cl 


B 


EH 


El 


El 


p 


E9 


m 


B 


El 


m 


El 


El 


i 


EH 



Cryptogram (T-l): 

ELIRI VM-TDD I M IT H H A I 0 I P LAOTO RNFVM" 
DLTUS EUOIU 

Fig. 15 
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In producing the foregoing cryptogram only the columns were transposed. 
Suppose that by prearrangement, using the keyword BREAK {derived numerical, . 
key - 2-5-3-1-4) , the horizontal lines of the foregoing enciphering rectangle 
were also to be transposed.- For example, let the horizontal lines of the 
rectangle D-l be transposed immediately before taking the letters out of the 
columns of the design (in keyuumber order) to form the cipher text. Thus: 



2 


El 


m 


H 


H 


ra 


m 


E> 


m 


5 


a 


0 


El 


m 


o 




01 


a 


3 


wm 


Hi 


Cl 


m 


m 


0 


0 


Cl 


1 


m 


0 


E9 


m 


0 


i 


a 


a 


4 


m 


ra 


Cl 


a 


o 


o 


0 


a 



D-l 



7 


l 


5 


3 


2 


8 


6 


4 


El 


El 


E3 


01 


El 


MM 


0 


H 


O 


Mm 


M3t 


a 


a 


0 


0 


MM 


El 


H 


El 


m 


a 


0 


0 


0 


El 


O 


El 


m 


a 


0 


0 


0 


M3 


M3 


ra 


m 


0i 


0 


0 


0 



D*£ 



Cryptogram' (T-2) : 



R 'EM I L D V T DM H I N IT M I A 0 P I T L 0 0 A V R F M IT 



UDTSL IEOUU 



Fig. 16 



£. The foregoing, however, is not a case of true polyphase or so-called 
double transposition. The same final result may be accomplished in a way 
which will at first glance appear quite different, but is in reality one that 
accomplishes the same two operations by combining them in one operation... Let 
the message be inscribed as before, but this time with both numerical keys 
applied to the top and side of the rectangle. Then let another rectangle of 
the same dimensions, but with numbers in straight sequence instead of key- 
number sequence, be set alongside it. Thus: 





7 


l 


5 


3 


2 


8 


6 


4 


2 


ra 


MM 


M3 


E3 


ra 


0 


ra 


ra 


5 


a 


a 


ra 


T1 


El 


0 


0 


El 


3 


B 


H 


El 


MM 


E3 


0 


B 


0 


1 


0 


0 


El 


m 


El 


0 


ra 


ra 


4 


El 


H 


0 


mm 


0 


0 


El 


0 



D-l 




D-2 



"Fig, 17 

Each letter in D-l is now transferred to that cell in D-2 which is indicated 
by the row and column indicators of the letter in D-l. For example, the 
first letter, D, of D-l, has the indicators 3-7 and it is pieced in the 
2-7 cell in D-2: the second Letter, of D-l,' which is 3, is placed in the 
2-1 cell of D-2, and so on. The final result is as follows: 
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7 


i 


5 


3 


2' 


8 


6 


4 




1 


2 


3 


4 


5 


6 


7 


8 


2 


m 


jap 


m 


n 


o 


m 


El 


m 


i 


wm 


El 


El 


0 


EM 


0 


|i| 


I 


5 




n 


E9 


m 


m 


m 




E9 


2 


s 


El 


n 


0 


n 


H . 


n 


E 


3 




of 




IT 


m 


El 


El 


El 


3 


I 


n 


m 


El 


n 


0 


0 


0 


1 


fci 


El 


ra 


m 


o 




Q 


a 


4 


m 


El 


m 


0 


0i 


m 


0 


0 


4 


S3 


H 


El 


m 


m 


El 


ip 


m 


5 


ES 


m 


m 


0 


B 


m 


a 


0 



D-l . D-2 



Fig. 18 

It will toe seen that if the columns of D-2 are now read downwards in straight 
order from left to right the final cryptogram is identical with that obtained 
under b_ above:-' -3 E I I. L. D V T. D H etc. .. 

_d. " The foregoing cipher, often called the Ilihilist' CipIrer, is referred 
to in some of. the older literature as a double transposition cipher because 
it involves a transposition of both columns and rows; and indeed as described 
under subparagraph _b above, it seems to involve a double process. It is, 
however, not an example of true, double transposition. Then the .mechanism of ; 
this cipher is compared with that now. to be' described, the; great, difference . 
in the cryptographic security of the two methods will - become apparent. • . : 

12, True double transposition. - a. In the form of the false double 
transposition described above, it is only entire columns and entire rows 
that are transposed. The disarrangement of the letters is after all not 
very thorough. In true double transposition this is no longer the case, 
for here the letters of columns. and rows become so . thoroughly rearranged 
that the final text presents a complete scrambling almost as though the let- 
ters of the message had been tossed into a hat and then drawn out at random. 



S3CTIGM IV. . .. 



Tlllg DOUBLE T.ldTSPOSmOI'T - 

Paragraph 

True double transposition of the columnar type 13 

General remarks on true polyphase transposition . ... 14 

13. True double transposition of the columnar type, - a_. It is by 



what is apparently a simple modification of certain of the columnar methods 
already described that an exceedingly good true double transposition can be 
eff acted. Let a numerical key be derived from a keyword in the usual manner, 
and let the message be written out under this key to form a rectangle, in the 
usual manner for columnar transposition. The length of the message itself 
determines the exact dimensions of the rectangle thus formed, and whether or 
not it is completely or incompletely filled. 

b. In its most effective form the double transposition is based upon 
an incompletely filled rectangle, that is, one in which one or more cells in 
the last line remain unfilled. An example of the method now follows. Let 



— I-D- r 9 3-Q 
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the keyword be. HJTXcTATIQLTAL ; the message to be enciphered, as follows: 

. QU3 ATTACK 3L0THTG UP HT FRONT OF HILL 1000 YARDS 30UTII2A3T 

• OF 00LDZI.TVILL3 STOP REQUEST PROMPT- 

Keyword: • . . • I H T 3 3 IT -A- T . I . Q N A L 

Derived numerical key: 4 — 7-12 — 3-11—8—1-13 — 5-10 — 9—2—6 

The first, or B-l, rectangle is inscribed in the usual manner of simple num- 
erical key columnar transposition. It is shown as D-l in the accompanying 
figure. The letters of the T-l tran sposition are then inscribed in the second 



4— 7-12— 3-11— 8— 1-13— 5-10— 9—2— S 



4-7-12—3-11—8—1-13—5-10—9—2—6 
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El 


El 


O 


E9 


q 


o 


m 


0 


m 




El 


H 




m 


El 


El 


m 


n 


o 


El 




m 






Si 


U 


ES 


B 


a 




a 




m 


pp 




El 






IO 


m 


|i| 


m 


a 


m 


o 




m 


El 


o 






m 


m 


m 


jQ 


a 


o 


jtj 


El 


g 


p5 


o 




a 


o 


m 


B 


pi 


Pp 




El 


El 


fel 


tn 


El 


ill 


HI 


m 


m 


B 


El 


El 


pn 


El 


0 


B 


pmi 


13 


i 


El! 


Cl 


o 


El 


a 


n 


o 


0 


0 


Hi 




H 




HI 



Q 


0 


EB 


EH 




El 


ipa 


0 


0 


0 


0 


El 


0 


ra 


0 


EE 


H 


m 


H 


■ 

PM 


H 


H 


H 


H 


■1 


H 


H 




HI 




m 




|H 


H 


■ 


m 


H 




Hi 


H 


HI 


IE 


El 


m 


B 


H 


H 


H 


H 


m 


H 


HI 




ih 


EE 


E 


Hj 


jjfi 


s 


HI 


Hi 


E 


Hi 


■1 


Hi 


H 


H 


1 




m 


B 


■ 


H 


m 


■ 


H 


H 


HI 


s 


s 


H 


m 


m 


H: 


m 


H 


m 


E 


H 


HI 


HI 


■ 


H 


H 


m 


m 


■j 




u 


m 


H 


S 


H 


m 



D-l 



D-2 



Fig. 19 -a 

or D-2, rectangle in the normal manner of writing, that is, from left to right 
and from the top downwards. This is shown in D-2 of Fig. 19-a. for the first 
two columns of D-l (in numerical key order) after transfer of their letters 
into D-2. The letters of the remaining columns of D-l are transferred in the 
same manner into D-2, yielding the following rectangle: 



4-7-12—5-11 -8—1-13—5-10—9 —2—6 
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El 
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El 


El 


0 


El 


m 


a 


a 


El 


m 


E9 


0 


O 


m 


0 


El 


fel 


m 


m 


0 


M 




i»i 












h»h 




iii 


m 


El 


m 


y 


13 




III 


El 


1:1 


El 


a 




El 


P 


El 


o 


o 


El 






KH 


a 






ill 


ml 


\m 


El 


m 


Isi 


lip 




Itl 


liM 












m 


m 




pil 










ill 
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E3 


E3 


o 


El 


0 


El 




H 


H 


H 







Fig. 19-b 

For the T-2 text the letters are transcribed from the D-2 rectangle, reading 
down the columns in keynumber order, and grouping the letters in fives. The 
cryptogram is as follows: 

PTRUT OGTTI SLOP? DUS70 SOSAU AOREA 
C03SH E E ID IT F 7TULC IT IT E S T Q, 0 F 0 Y' K F F H R 
P U 0 R A IT TLTH' LULUS '51.033 OH 0 U A I H I E S 
EiTlTI EDIT ■ ' » ’ 
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■ _ r * ■ . w • ' 

_c. In Parasraph 28 of Special Text Ho. 165 a. variation of the - simple 
columnar key method of transposition was described. If the process' therein 
indicated is repeated, double transposit ion' is effected. The following ex- 
ample Will serve to illustrate the method, using the .Whine message' and; key 
as were. Used in. the paragraph to which reference was made: . 

1/jessage,: • BEQUEST Uf lSDIATE HSMFOBC^ia'TTS • 

Keyword:. PH 0 D U C T 

' Derived numerical' key:,. 4-5-3-2-7-1-6 , 



: Encipherment: 



Text : 


4-5-3-2-7-1-6 

REQUEST 


4-5-3 -2 -7 -1 -6 , 
I U M E D I A 


4-5-3-2-7-1-6 

T E R EE R F 


4-5-3-2-7-1-6 
0 R. C, E M E R 


4-5 

TS 


T-l 


S I R E U E S 


E Q M R C R I 


T O T E i. I E R 


S T A F IT t D 


E M 


T~2 ': 


■ E.R E. E E R E 


F IT M -T,A S E 


T S E I Q 0 T 


ME I R D U C 


MR 



Cryptogram: •. •. ’ ^ •• ... t 

E R E E 33' . R E E H I I T A S E T S E I Q 0 . T H E I B 



D U C M R - ., 

d. In some respects this modified method is simpler for the novice to 
perform correctly than is that employing rectangles. Experience has shown 
that- many .inexpert cryptographic clerks fail to perform the two transpositions 
correctly , when TKL and .D-.2 rectangles are employed in the work. 

''••14.. General remarks, on 'true polyphase transposition. - a. The crypto- 
gra.prib-ic. security, of the true double transposition' method deserves discussion* 
Careful .study of a cryptogram enciphered by the’ ‘double transposition method 
bet • forth . in, paragraphs 13^b and will convince the student that an extremely 
thorough scrambling- of the letters is indeed brought about by the method. 
Basically, its principle is the' splitting up of the adjacent or successive 
letters .constituting -the plain' text by. .two sets' of ’’cuts”, the second of which 
is in a direction that is perpendicular to the first, with the individual 
"cuts" of both sets arranged in a variable and irregular order. It is well 
adapted -for a regular and voluminous exchange of cryptograms between corres- 
pondents, because even if many messages ip the game key are intercepted, so 
long as no two messages are identica l in length , they can only be crypt- 
analyzed after considerable effort. ' 

Jb. Triple and quadruple transpositions: of the same nature are possible 
but not practical for. serious usage. Theoretically, a continuation or repeti- 
tion of the transposition process will ultimately bring about a condition 
wherein the Dyn rectangle is identical with the D-l rectangle; in other words, 
after a certain number of transpositions the . rectangle produced by a repeti- 
tion, of the crypt dgra'phing process result’s finally in decrypt ographing the 
message. Exactly haw jqpny repetitive transpositions intervene in such cases 
is extremely variable and depends- upon. factors lying outside the scope of this 
text. 
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_c. In the example of cryptographing given in Par. 13-b , the D-l and 
D-2 rectangles are identical in dimensions and identical numerical keys 
'are applied to effect the T-l and T-2 transpositions. It is obvious, how- 
ever, that it is not necessary to maintain these identities; D-l and D-2 
rectangles of different dimensions may readily be employed, and even if it 
is agreed to have the dimensions identical, the numerical keys for the two 
transpositions may be different. Furthermore, it is possible to add other 
variable elements. (1) The direction or manner of inscribing the letters 
in the D-l rectangle may be varied; (2) the direction of reading off or 
taking the letters out of the D-l rectangle in effecting the T-l trans- 
position, that is, in transferring them into the D-2 rectangle, may be 
varied; (3) the direction of inscribing these letters in the D-2 rectangle 
may be varied; (4) the direction of reading off or taking the letters out 
of the D-2 rectangle in effecting the T-2 transposition may be varied. _ 
Finally, one or more nulls may be inscribed at the end of either the D-l 
or the D-2 rectangle (but not both) in order that the total number of let- 
ters involved in the two transpositions be different, a factor which still 
further increases the degree of cryptographic security. 

d. The solution of cryptograms enciphered upon the double transposi- 
tion principle is often made possible by the presence of certain plain-text 
combinations, such as QU and CH (in German). For this reason, careful 
cryptographers substitute a single letter for such combinations, as de- 
cided upon by preagreement . For example , in one case the letter Q was in- 
variably used as a substitute for the compound CH, with good effect. 



SECTIQJ7 V. 

GRILLES 

Paragraph 

Types of cryptographic grilles 15 

Simple grilles 16 

Revolving grilles 17 

Grilles of other geometric forms 18 

Polyphase transposition by grilles 19 

Increasing security of revolving grilles .., 20 

Construction of revolving grilles 21 

ITonperf orated grilles 22 

Rectangular or "post -card" grilles 23 

Construction of rectangular or "post card" grilles 24 



15. Types of cryptographic grilles. - Broadly speaking, cryptographic 
grilles 1 are sheets of paper, cardboard, or thin metal in which perforations 
have been made for the uncovering of spaces in which letters (or groups of 
letters, syllables, entire words) may be written on another sheet of paper 
upon which the grille is super imposed. This latter sheet, usually made also 
of cross-section paper, will hereafter be designated, for purposes of brev- 
ity in ref erehce , -a s the gril l e grid, or grid . Its external" dimensions are 
the same as those of- the grilie. Grilles are of several types depending 
upon their construction and manner of employment. They will be treated here 
.under the titles of (1) simple grilles, (2) revolving grilles, (3) nonper- 
forated grilles, and (4) "post card" grilles. 



Also often called "stencils." 
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' , 16. Simple grille’s, - .a.. These consist usually of a square in which 
holes or apertures - ha v® been cut in prearranged positions'; when, the grille 
t is superimposed -upon ’the - grid, these apertures disclose cells on 'the grid, 

in which cells letters, groups of letters, syllables, or entire words may be 
inscribed. An example is shown in Fig. 20. The "four sides of the obverse 
surface of the grille are designated by the figures 1, 2, 3, 4; the four 
sides of the reverse surface, by the figures 5, S, 7, 8. These figures are 
employed to indicate the position of the grille upon the grid in encipherment. 




b. (1) In cryptogranhing a message the grille is placed upon the grid, 
in one of the, eight possible positions: obverse surface up, with 'figure 

1, 2, 3, or 4 at the top left; or reverse surface up, with figure 5, 6, 7, or 8 
at the" tOp .left . The letters of the plain text are then inscribed in the 
cells disclosed by the apertures, following any prearranged route. In Jig. 21, 
the normal manner of writing, from left to right, and from the top downwards, 
has been followed in the inscription, the message being ALL HISTROT’JRS OUTSIDE. 




Fig. 21 
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(2) The transcription process now follows. The cipher text is 
written down, the letters being taken by following any prearranged route, 
which must be perpendicular to the route of inscription, otherwise the let- 
ters will follow in plain-text order. In the following, the route is by 
columns from left to right.. 

Cryptogram: 

LftT.AD .1SSEH YOIDS I L 0 E U 

(3) If the. number of letters of the plain-text message exceeds the 
number of cells disclosed by one placement of the grille, the letters given 
by this placement are written down (in cryptographic order) and then the 
grille is placed in the next position on a fresh grid; the process is con- 
tinued in this manner until the entire message has been cryptographed. The 
several sections of the cipher letters resulting from the placements of the 
grille on successive grids merely follow each other in the final cryptogram. 

In this manner of employment it is only necessary for the correspondents to 
agree upon the initial position of the grille and its successive positions 
or placements, 

c* It is obvious that by the use of a simple grille the letters of a 
message to be cryptographed may be distributed within an enveloping message 
consisting mostly of "dummy" text, inserted for purposes of enabling the 
message to escape suppression in censorship. For example, suppose the grille 
shown in Fig. 20 is employed in position 1, and the message to be conveyed is 
ALL DESTROYERS OUTSIDE. The letters of this message are inscribed in their 
proper places on the grid, exactly as shown in Fig. ,?1» An "open" or disguis- 
ing text is now to be composed, the latter serving as an envelope or "cover" 
for the letters of the secret text, which remain in the positions in which 
they fall on the grid. The open or disguising text, in other words, is 
built around or superimposed on the secret text. Dote how this is done in 
Fig. 22, with an apparently innocent message reading: 

I HAVE WORKED VERY '.'/ELL ALL DAY, THYETG TO. GET EVERYTHING STRAIGHTENED 

UP BEFORE GO DIG QLT MY NEXT TRIP SOUTH, BUT INSIDE TEW DAYS. ... 




•Fig, 22 
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d. The foregoing method naturally requires the transmission of consider- 
ably more text than is actually necessary for conveying the message intended, 
'iJhere questions of .censorship are not involved, the method is therefore imprac- 
tical, A modification of the method suggests itself in the use of a transpar- 
ent sheet of paper superimposed upon a square or other .figure in which the 
individual cells are irregularly numbered and the inscription process follows 
the sequence of numbers. An example -is- shown in Fig. 23, using the message 
ROCK CREEK BRIDGE ~.7HL BE DESTROYED 1HECT TAIL HiS. CROSSED., 



16 


WEM 


Em 


21 


BaB 


EDI 


» 


EEB 


6 


E£K 


Em 


Em 


mm 


fell 




ma 


23 


EDI 


ea 


iei 


24 


E3 




MEM 


34 


12 


■3 


42 


Em 


4 


33 


38 


2 


35 


ESI 




5 


46 




mem 


27 


19 


ea 


Em 


22 


40 


36 


9J 



Ijfl 


mm 


mm 


mm 


mm 


mm 




mmm 


R 


i 


u 


s 




mm 


mm 


mm 


E 


ma 


mm 


B 


mm 


mm 


mm 


G 


N 


i 


E 


0 


D 


K 


E 


i 


0 


lJL . 


mm 




o 


m i 


R 


I 


0 


mm 


mm 


m 


D 


mm 


u 


Bfl 



Pig. 23 £ 



The transcription may now follow any prearranged route. The normal method of 
reading would produce the cryptogram beginning WCTEH OEERI, etc. It 
is obvious that the correspondents must possess designs with identically numr* 
bered cells 1 *-. 

17. Revolving grilles. - ja . In this type of grille ( see Fig. 24-a) 
the apertures are also formed by perforating a sheet of cros3-section paper 
according to prearrangement, but these apertures are so distributed that 
when the grille is turned four times successively through angles of 90° and 
set in four grille positions on the grid, all the cells on the grid are dis- 
closed in turn, (The preparation of such grilles will be discussed in Para- 
graph 21.) ■ If letters are inserted in the cells so disclosed, then after a 
complete revolution of the grille every one of the cells of the grid will 
contain a letter and thus the grid will be completely filled. For this 
reason such a grille is also called a self -filling, or an aut ornati c -completion 
grille. The secrecy of messages enciphered by its means is dependent upon 
the distribution or position of the apertures, the sequence of grille posi- 
tions on the grid, (i.e., whether in the order 1, 2, 3, 4 clockwise; or 1, 

3, 4, 2 etc.) and the route followed in inscribing and transcribing the let- 
ters in the cells of the grid. For each position of the grille one-fourth 
the total number of letters of the text is inscribed; hence it is convenient 
to refer to '’sections 1 ' of the text, it being understood that each section 
consists of one-fourth the total number of letters. 



b,. There are two possible procedures so far as the insoript ion-trans- 
cript ion sequence is concerned, (1) The letters of the plain text may be 
inscribed in the cells of the grid through the apertures disclosed by the 
grille and then, when the grid has been completely filled, the grille re- 
moved, and the letters transcribed from the grid according to a prearranged 
routes or, (2) the letters of the plain text may first be inscribed in the 
cells of the grid according to a prearranged route and then the grille ap- 
plied to the completely-filled grid to give the sequence of letters forming 
the cipher text of the transcription process. The first method wili.be 
described in subparagraph _c, the second in subparagraph s.. 

1 The system employed by the French Army in 1886 was of the nature here de- 
scribed. 
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£. Taking the simplest manner of inscribing the letters, that is, from 
left to right and from the top downwards, the letters of the first section of 
.the text are inscribed in the cells disclosed by the apertures, the grille 
being in the first position. This is shown in Tig. 24-b. The grille is then 
given l/4 turn clockwise, bringing figure 2 to the top left. If the grille 
has been correctly prepared none of the cells disclosed in the second grille 
position on the grid will be occupied by a letter. The letters of the second 
section are then inscribed, this being shown in Tig. 24^0. In Pig. 24-d and 
e, the results of inscribing the third and fourth sections, respectively, are 
shown. T^e letters of the cryptogram are then taken out of the completed grid 
by following any prearranged route' of transcription. The cryptogram below has 
been transcribed by following down the columns in succession from left to right. 

Message: . HOSTILE 75-MM ARTILLERY' IN ACTION AT' FARMHOUSE 350 YARDS 
SOUTHWEST OP HAMILTON SCHOOLHQUSE. 
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Cryptogram: 

ii h i c v y a oo t- -7 ilhu 

F S 0 M T HURTI TCULO 

B 0 E D A TMTUI ESTEL 

YFBMU fi N SEE F AS E S 

E 3 E A T ' 0 I D TL Y NOIH 

AHEAH- EDP'OT UHS.HH 

E T A M I YOSRE 



„ ■ : , Fig* 24 (Contd.) 

_d , .To de cryptograph such a message, the cipher letters are inscribed 
columnwise -in a grid 10x10 {i.e., one coniposed of 100 cells, 10 per side) 
and then the- grille applied to the square in four consecutive positions 
corresponding to those used in cryptographing. The letters^ disclosed by 
each placaaent of the grille are written down as they appear, section after 
section. : • 



. ■ The second mannerof employing a revolving grille is merely the 
reciprocal of the first. The procedure followed in the first method to-. 
decryptograph : a message is followed in the second method to cryptograph a. 
message; and.t|ie prqcedi re followed in the first method to dryptograph is 
followed in the second method to decryptogreph. 



18. • Grilles of : other "geoBB’tti c forms. - Grilles, are not .limited to 
square-shaped figures. They may ' be equilateral triangles, pentagons, hex- 
agons, and so _on.‘ Any figure “which can be pivoted upon a central .point 
and. which- when -revolved upon this pivot can be placed in a- succession of 
homologous positions over a grid corresponding to the grille will serve 



equally .well . 
and so on. 



A triangle affords 



•three grille positions, a pentagon, five, 



19. Polyphase transposition by grilles. - One grille may. be employed 
to inscribe the letters of the message on the grid and a second, and dif- 
ferent’ grille Mployed to transcribe them from the grid to fora the final 
text of the cryptogram. This! vroulh constitute a real double transposition 
method of great domplexity; ‘ Bolyohase transposition by a series of grilles 
is of course possible, ' : 

20. Increasing the security of revolving grilles. - _a. The total 
number of letters which a" grille 'ttHl exactly encipher is termed its cap- 
acity. If the number of letters of a message is always equal to the total 
capacity of th9 grille, this information is of great aid in solution by 
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the eneny. For example, a message of 64 letters indicates a grille 8x8 with 
16 apertures; one of 144 letters, a grille 12x12 with 36 apertures, and so on. 
There are, however, methods of employing a grille so that it will serve to 
encipher loss sages the lengths of which are greater or less than the capacity 
of the grille. 

b_. .'.Tien the total number of letters is less than the capacity of the 
grille, no modification in msthod of use is necessary. Encipherment of such 
a message comes to a close when the last plain-text letter has been inscribed. 
In de cryptographing such a message, the recipient must strike out, on the grid 
upon which he is to inscribe the cipher text, a number of cells corresponding 
to the difference between the number of letters of the text as received and 
the total capacity of the grille. The location of the cells to be thus eli- 
minated must be prearranged, and it is best usually to strike them off from 
the final positions of the grid. 



Qj, When the total number of letters is equal to or greater than the 
capacity of the grille, a grid of greater capacity than that of the grille 
can be prepared, on which the grille may be positioned several tines, thus 
forming a large or composite grid composed- by the juxtaposition of the sev- 
eral' snail grids. If there are a few cells- in excess of the actual number 
required, these may be struck off from the large grid at prearranged points, 
for example, from the last column and row, as shown in Fig. 25-b. The 
grille is then placed in its first position in turn on each of the component 
grids, then in its second position, and so on. An example will serve to 
illustrate. A message of fifty-two letters is to be enciphered with the 
grille shown in Fig. 25-a, the capacity of which is sixteen letters. The 
number of letters of the message being greater than three times sixteen, 
the composite grid must be composed of four small grids containing a total 
of sixty-four cells. Therefore, twelve of these cells must be eliminated. 
These are shown in Fig. 25-b,- together with the number indicating the posi- 
tions occupied by the letters of the text. 




Fig. 25 
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21. Construction of revolving grille's. - a,. There are several ways 
of preparing revolving grilles, of which the one described below ia the most 
simple. All methods make use of cross-section paper. • 



b. Suppose a revolving grille with a capacity of 100 letters is to be 
constructed. The cells of a sheet of cross-section paper 10x10 are numbered 
consecutively in ; bands from the outside to the center, in the manner shown 
in Fig. 26-a. It will be noted that in each band, if n_ is the number of . 
cells forming one side of the band, the highest number assigned to the cells 
in each band is n-1. 



1 


2 


3 


4' 


5 


6 


7 


8 


9 


1 


9 


1 


2 


3 ' 


4 


5 


6 


7 


1 


2 


8 


7 


1 


2 ■ 


3 


4 


■5 


1 


2 


3 


7 


6 


5 


1 . 


.2 


3 


1 


2 


3 


4 


6 


5 


4 


3 


1 


1 


2 


3 


4 


5 


5 


4 


3 


2 


1 


'1 


3 


4 


5 


6 


4 


3 


2 


1 


3' 


2 


1 


.5 


6 


7 


3 


2 


1 


5 


4 


3 


2 


1 


7 


8 


2 


1 


7 


6 


5 


4 

' - 


3 


2 


1 


9 


1 


9 


8 


7 


6 


5 


4 


3 


2 


1 



Fig.- 26-a 



It will be noted that in each band there is a quadruplication of 
each digit: the figure 1. appears four times, the figure 2 appears four times, 

and so oh. From eaoh receding band there is to be cut out (n-1) cells: from 

the outermost band, therefore, nine cells are to be cut out; from the next 
band, seven; from the next, five; from the next, three; and from the last, 
one cell. In determining specifically what cells are to be cut out in each 
band, the only rules to be observed are -these: (1) one and only one cell 

bearing the figure 1 is to be cut out, one .and only one cell bearing the fig- 
ure 2 is to be cut out, and so on; (2) as random a selection as possible is 
to be made among the cells available- for selection, for perforation. In 
Fig. 26-b is shown a sample grille prepared in this way. 
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_d. ■ If .If he. side of the grille is coraposed of an odd number of cells, 

the innermost band will consist' of but "one cell* In such case this central 
cell must not be perforated, 

_e. It is obvious that millions of differently perforated grilles may 
be constructed. Grilles of fixed external dimensions, may be designated by 
indicators, as was done by. the German Army in 1915, when this system was 
employed. For .example,' the FRITZ grille might indicate a 10x10 grille , 
serving to encipher message’s' of about 100 letters; the ' ALBERT grille might ■ 
indicate a 12x12 grille, serving to encipher messages of about 144 letters, 
and so on. Thus, with a set of grilles of various dimensions, all construct- 
ed by a central headquarters and distributed to lower units, systematic use 
of grilles for messages of varying lengths can be afforded. 

f* A system for designating the positions of the perforated cells of 
a grille may he established between correspondent s , so that the necessity 
for physical transmission of grilles for ‘ intercommunication is eliminated. 

An example of a possible system is that, which is based upon the coordinate 
method of indicating the perforations.*. .The. columns from left to right and 
the rows from bottom to top are designated by the letters A, B, C, ... • 

Thus, the grille shown in Fig, 26-b_ would have the following formula: 

ADG; BBEH; CDJ; BEG; EACH; FFI; QE; HBDHJ; IDG; JABFI. 

*1 : 

Given the formula, the eight corners of the grille can be labelled 
in various ways by prearrangeroent . But the simplest mathod is that shown in 
connection with Fig. 26-b. Then the initial position of the grille can he 
indicated by the number which appears at the upper left-hand corner when the 
grille is placed on the grid, ready for use. Thus, position 1 indicates that 
the ‘grille is in position with the figure 1 at the upper left-hand corner; 
position 3, with the figure ,3 T at the upper left-hand corner, etc. 

h. The direction of revolving the grille can be clockwise or counter- 
clockwise, 30 that correspondents must make arrangements beforehand as to 
which direction is to be followed. 

i. Revolving grilles can be constructed so that they have two ‘operating 
faces, an obverse and a reverse face They may be termed revolving-rev e rsible 
grilles. The principles of their construction merely involve a modification 

of those described in connection with ordinary revolving grilles. A revolving- 
reversible grille will have eight possible placement indicators; usually posi- 
tions 1 and 5, 2 and S, etc., correspond in this obverse-reverse relationship, 
as shown in Fig. 20. 

j_. The principles of construction described in the preceding paragraphs 
apply also to grilles of other shapes, such as triangles, pentagons, etc. 

22. Nonperf orated grilles. - a. All the effects of a grille with 
actual perforations may be obtained by the modified use of a nonperforated 
grille. Let the cells that would normally be cut out in a grille be indicated 
merely by crosses thereon, and then 4>n a sheet of cross-section paper let the 
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distribution of letters resulting from each placement of the grille on a grid 
.be indicated by inserting crosses in the appropriate pells, as showpa ..in' Fig. 27. 



Grille 



Grille 

Position 




of crosses shown, in the third' K}W' of i cells is the reverse of that shown in 
the first; the' distribution shown in . the fourth row is the reverse of that 
shown in the second. This rule is applicable to all revolving grilles and 
is of importance in solution. ; « • 

; c. If the letters of the text are now inscribed (normal manner of 
writing) In the cells not eliminated by crosses, and the letters trans- 
cribed from columns to form the' cryptogram, the results are the same as 
though a perforated grille hadrbeeh employed. Thus: ■ 




E W. C R A E 0 L D A R D D A T Y 
Cryptogram: 

EWCRA E 0 L ■ D A R D D A T Y 

Fig.: 27-jC 

d_. It is obvious that a numerical key may be applied to effect a 
columnar transposition in the foregoing method, giving additional security. 

_e. The method is applicable to grilles of other shapes, such as 
triangles, pentagons, hexagons, octagons, etc., 

f. In Fig. 27 -c. it is noted that there are many cells that might be 
occupied by letters but are not. It is obvious that these may be filled 
with nulls so that the grid is completely filled with letters. Long messages 
may be enciphered by the superposition of several diagrams . of the same" dimen- 
sions as Fig. 27-c,. 
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23, Rectangular or ''post-card" grilles. - a. The grille shown in Fig. 28 
differs from the ordinary revolving grille in that (1) the apertures are rect- 
angular in shape, and are greater in width, thus permitting of inscribing sev- 
eral letters in the cells disclosed on the grid by each perforation of the 
grille i and (2) the grille itself admits of but two positions with its obverse 
side up and two with its reverse side up. In Fig. 28 the apertures are num- 
bered in succession from top to bottom in four series, each applying to one 
position of the grille; the numbers 
in parentheses apply to the aper- 
tures when the grille is reversed; 
the numbers at the corners apply 
to the four positions in which the 
grille may be placed upon the grid. 



_b. One of the ways in which 
such a grille may be used is to 
write the first letter of the text 
at the extreme left of the cell 
disclosed by aperture 1, the sec- 
ond letter, at the extreme loft of 
the cell disclosed by aperture 2, 
and so on. The grille is retained 
in the same position and the 17th 
letter is written immediately to 
the right of the 1st, the 18th im- 
mediately to the right of the 2nd, 
and so on. Depending upon the 
width of the aperture, and thus of 
the cells disclosed on the grid, 

2, 3, 4 ... letters may be in- 
serted in these cells. Then all 
the cells have been filled, the 
grille may then be placed in the 
second position, then the third, 
and finally, the fourth. 



_c. Another way in which 
the grille may be used is to 
change the position of the grille 
after the ISth letter has been 
inserted, then after the 32nd, 

48th and 64th; the 65th letter 
is then inserted to the right of 
the 1st, the 81st, to the riglrt 
of the 17th, and so on until the 
grid is completed. Fig. 28 
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d. Whole words may, of course, be inserted in the cells disclosed by 
the apertures, instead of individual letters, but the security of the latter 
method is much lower than that of the former. 

j 3 . The text of the grid may be transcribed (to form the cryptogram) by 
following any prearranged route. 
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_f. The successive positions of a post-card grille may be prearranged. 
The order 1, 2, 3, 4 . is. but one of 24 different sequences in which it may 
be superimposed upon the grid.- 

24. Construction of rectangular or "post-card” grilles. - a . A mod- 
ification of the principles set forth in Paragraph 21, dealing with the con- 
struction of revolving .grilles, is applied in the construction of rectangular 
or "post -card" grilles. ; Note 'the manner in which the cells in Fig. 2 9 -a are 
assigned numbers: homologous cells in each band receive the same nuiuber. 

In Fig. 29-a_ there are three bands, numbered from 1 to 8, 9 to 16, and 17 to 
24. Then in each band one and Only one cell of the same-numbered set of four 
cells is cut out. For example, if cell la is selected for perforation from 
band 1 (as indicated by the check mark in that. cell), then a cross is written 
in the other three homologous cells, lb_, c_, and d_, to indicate that they are 
not available for selection for perforation . Then a cell bearing the number 2 
in band 1 is selected, for example, 2c, and at once 2ja, b, and _d are crossed 
off as being- ineligible for selection, and so on. 



Band 1 





Fig. 29 

In Fig. 29-c is shown a grille as finally prepared, the nonshaded cells rep- 
resenting apertures. 
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Fig, 29 -c_ 

b. . The foregoing grille is a "six-column" one, that is, the cells 
form six columns. It is obvious that grilles with any even number of 
columns of cells are possible. The number of apertures in each band should 
be equal and this number multiplied by the number of bands and then by 4 
should equal the capacity of the grille. In the case of the one shown in 
Fig. 29-jc the capacity is 8 x 3 x 4 or 96 cells; this is the same as is ob- 
tained merely by multiplying the height (in cells) by the number of columns 
16 x 6 ss 93. If 4 letters are inscribed in each rectangle, the capacity of 
the grille in terras of letters is 384. The grid in this case, would, after 
completion, present 24 columns of letters, to which a numerical hey for a 
second transposition can be applied in transcription to produce the final 
text of the cryptogram. 



- SECTION VI. 

l.tESCgLLil'lEOUS T3AITSP0SITI0IT SYSTEMS . 

Paragraph 



Complex route transposition 25 

Transposition of groups of letters, syllables, and words 26 

Disguised transposition methods 27 

Cipher machines for effecting transposition 28 



25. Complex route transposition. - ja. In Fig. 30 a route for in- 
scribing letters within a rectangle is indicated by a sequence of numbers. 
The initial point may be at any of the four corners of the rectangle, or, 
indeed, it may be at any other point, as prearranged. The letters may he 
inscribed to form the rectangle by following the route indicated and then 
transcribed from the rectangle to form the cryptogram by following another 
route. Or the letters may be inscribed according to one route and tran- 
scribed according to the numerical route indicated. 
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_b. A variation of the fore- 
going is that ; illustrated in . 

Fig. 31, wherein the- inscription 
follows the route shown by £he 
arrows . The initial point of in'- , 
scripti.on is indicated, by the- fig-,. " 
ure 1,. and the. final point,, by the . 
figure S. ... _ 

c. In the foregoing case, ..... 
the route ia a succession of the... 
moves made by the king , in the 
game of chess; it forms the so- 
called "king 1 s' .-tour !, f in which 
the playing piece makes a .complete 
or reentrant journejr cqver.ing a.11 
cells of the chessboard-, each cell . 
being traversed only onee, with 
•the last move placing- the piece 
in a cell from which it may next 
move into the: <*eil from whichthe 
journey started i A route .corn-: 
posed of a succession df moves made 
by the knight, or the so-called 
"knight’s tour” ,1s - also possible, 
but in order- to :be practical a 
grid with the cells numbered in . r 
succession would have to be pre- 
pared for the correspondents, 
since millions of different -re-:- ■ ; . . 
entrant knight’s tours can be • 
constructed^- :on a .chessboard of: ■ 
the usual 34 cells. 



90 


61 


60 


31 


30 


1 


2 


29 


32 


59 . 


62 


89 


88 


S3 


; 59 . 


33 


28* 


3 




27 


34 


57 


64 


87 


J3§j 


65 


56 


35 


26: 


5 


•6 


25. 


36 


55 


66 1 


sp 


84 


67 


54, 


2L 


,24 


7 


. 8 


23 


38 


53 


['68 


83" 


82 


69- 


.52 


39- 


•S& 


-9 


10 ' 


21 


40 


51, 


70 


81 


80 


71 


50 


41 


20 


11 


12 


T.9 


42 


49 


72' 


79 


78 


73 


48 


43 


18 


13 


14 


17- 


44 


■47' 


74. 


77 


,76 


7.5 


46 


45 


16 


15 



/ 'Fig- fo 




Fig. 31 



23. Transposition of groups of letters,., syllables, and words. - There 
is nothing in the previously described ‘methods which precludes the possibility 
of their application to pairs of letters* sets of three or more letters, or 
even syllables and whole wards, Eor, of. course,, is their use limited to ope- 
rations with plain text: they may' be applied as secondary steps after a sub- 
stitutive process, has. been. completed _ (see Section X). 

27, Disguised transposition methods, - a. The system, often encountered 
in romances and mystery stories, herein the message to be conveyed is in- 
serted in a series of nonsignificant: words constructed with the, purpose of 
avoiding or evading suspicion, is. a; species of . this form of "open” crypto.-, 
gram involving transposition.. Thorpe*" or. enveloping, apparently innocent 
text may be designated as the external teat ; the, secret or-. cryptographic text 
may be designated as- the internal text, A complicated example of external or 
open and internal or- secret texfc ; is that shown in Paragraph 16> 

b. Little need be said of the method based upon, constructing external 
text the letters of which, at prearranged positions or: intervals, spell out 



1 .See Baili, W. tf.R., Lfethematical Recreations and Dssaysj London, 1928. 
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the internal text. For example, it may be prearranged that every fourth 
letter of the external text forms the series of letters for spelling out 
the internal text, so that only the 4th, 8th, ISth ... letters of the ex- 
ternal text are significant. The same rule may apply to the complete words 
of the external text, the ii, 2n, 3n, ... words form the internal text. The 
preparation of the external text in a suitable form to escape suspicion is 
not so easy a3 might be imagined, when efficient , experienced, and vigilant 
censorship is at work. Often the paragraph or passage containing the 'secret 
text is sandwiched in between other paragraphs added to pad the letter as a 
whole with text suitable to form introductory and closing matter to help 
allay suspicion as to the presence of secret, hidden text. 

jo. A modification of the foregoing method is that in which the 1st, 
3rd, 5th, ... words of a secret message are transmitted at- one time or by 
one agency of comrmini cation, and the 2nd, 4th, 6th, ... words of the mes- 
sage are transmitted at another time or by another agency of communication. 
Numerous variations of this scheme will suggest themselves, but they are not 
to be considered seriously as practical methods of secret intercommunication. 

4. Two correspondents may agree upon a specific size of paper and a 
special diagram drawn upon this sheet, the lines of which pass through the 
words or letters of the internal text as they appear in the external text. 

For example, the legs of an equilateral triangle drawn upon the sheet of 
paper can serve for this purpose. This method is practicable only when 
messages can be physically conveyed by messenger, by the postal service, or 
by telephotographic means . Many variations of this basic scheme may perhaps 
be encountered in censorship work. 

28. Machines for effecting transposition. - These may be dismissed with 
the brief statement that if any exist today they are practically unknown. A 
few words are devoted to the subject under Paragraph 71, Section XT?. 



B. SUBSTITUTION SYSTEI.B 
SECTION VII. . 

POLVCHAPHIC 'SYSTEMS 

Preliminary remarks 

Monographic and polygraphic substitution 

Polygraphic substitution by means of tables .. 

29. Preliminary remarks. - a. It is assumed that the student has ab- 
sorbed the information contained in Sections VTI - VIII, inclusive of Special 
Text No. 165, Elementary Military Cryptography. These sections deal \7ith the 
various types of cipher alphabets, simple monoalphabet ic substitution, mono- 
alphabetic substitution with variants, the more simple varieties of poly- 
alphabetic substitution, cipher disks and cipher tables. The present study 
of substitution is a continuation of the former, a thorough understanding of 
which is a requisite to the examination of the more complex types of substi- 
tution now to be set forth. 

Tb. Before entering upon the study referred to, it will be advisable to 
explain several terms which will be used. Substitution methods in. general may 



Paragraph 

29 

30 

31 
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be described as being monolitera l ,.ca? polyliteral in character* In the former 
there is. .a strict letter-for-letter replacement, or, to include numerical and 
aymb ol net hods, there is a "one-to-one" correspondence between the length' of 
■the,qnits of the plain text and those : of the cipher text, no. matter -.whether 
.the substitution is mono alphabetic or 'polyalphabejtic in character. *In poly- 
'lx^erhl' methods, however, -this "one-to-one" correspondence no longer holds:. 
a'comBination of two letters, or of two figures, or of a letter and a figure, 

■ may represent a single letter of the plain text ; ‘there' : is here a "two-to-one" 
correspondence, two characters of the cipher text representing one of the 
plain. text. The methods described under 1 Section X pf Special Text No* 165,. 
Elementary Military Cryptography, fall under the latter designation; the ci- 
pher' equivalents there shown are, properly speaking, bipartite in "character* 
Tripartite cipher, equivalents are also encountered. Poly literal-methods, 
therefore, are said to employ polypart ite ' alphabets, of which the bipartite 
type isby far the most common , Further on in this text, polyliteral methods 
of greater complexity than those- illustrated in Section X of Special Text 
No, 165 will be discussed; Attention now will be directed more particularly 
to a, different type of- substitution designated a 3 m onographic and poly graphic 
substitution, ■ : . . .. ' **• 

30. Monographic and polygraphic substitution.*- a. All the methods 
of substitution -heretofore described sere monographic in nature, that is, in 
the enciphering process the individual units subjected to treatment are 
single letters; there is a letter-for-letter substitution, or, to include • 
numerical and symbol methods, - there is, as in the case of monoliteral sub- 
stitution.,- a. "one-to-one" correspondence between units of the plain text and 
those of, the cipher -text.,, In polygraphic substitution, however, combinations 
of letters: of the. plain text, considered as indivisible' compounds, constitute 
the units for treatment’ in encipherment. If the' units consist of pairs of 
plain-text, letters, the encipherment id pair-for-pair, and is said to be : 
digraphic in character;’ if the units -consist of set 3 of three letters, it is 
trigraphic 'in character and so on* ' There is still a ."one-to-one" corres- 
pondence' involved, but the units. in these cases are composite in character 
and .the individual elements composing the units affect the cipher equivalents 
jointly, rather than separately. The basic important- factor in ,true :; poly- 
.graphic substitution is that all .the letters- of the group. participate in the 
determination' of' the. cipher equivalent of the group; thq .identity of each 
letter of the plain-text group affects t,he .composition of the whole cipher 
group. Thus, in a certain digraphic system ABp may be enciphered' as XP C , 
and AC-rt, on the other hand, may be enciphered as NK C ; a difference in the 
identity of' but bne.of the: letters of the plain-rtext pair, here produces a 
difference in the identity of both letters of the. .cipher pair., 

■ -by For .practical usage polygraphic' substitution is limited to the 
handling "of .'digrapHs arid trigraphs, although very -occasionally groups of 
more than' three letters' may' be employed for . special, purposes', 

c/ • Tbq fundamental purpqse of. polygraphic substi-ftition is the". sup- 
pression or rather the elimination of the frequency characteristics of 
ordinary plain text. It is these frequency characteristics which lead, 
sooner or later, to the solution of practically all substitution ciphers, 

"When the substitution involves only individual letters in a monoalphabetic 
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system, the cryptogram can be solved very quickly; when it involves individ- 
ual: letters in a polya lphabetic system,, .the cryptogram can usually be solved, 
but only after a much longer time and much more study, depending upon the 
•complexity of the method. The basic principle in the solution, however, is 
■ to reduce the polyalphabet ic text to the terras of monoalphabetic ciphers and 
then to solve 1 the latter. In true polygraphic substitution on the. other 
hand, the solution does not rest upon the latter basis at all because it is 
not a- 'question of breaking up a complex text into simpler elements; it rests, 
as a rule, upon the possibility of analysis on the basis of the frequency of 
the polygraphic units concerned. If the substitution . is digraphic, then the 
units are pairs of letters and the normal frequencies of plain-text pairs 
become of first consideration; if the substitution is trigraphic, the units 
.are sets of three letters and the normal frequencies of plain-text trigraphs 
are involved. In the last two cases the data that can be employed in the 
solution are meagre, and are far from definite or unvarying in their signif- 
icance, and that is tahy solution of polygraphic substitution ciphers is often 
extremely difficult. 

d. Just as in typography, when certain combinations of. letters, such as 
fi, fl, ahdffi; are mounted on one - find the same piece of type, they are called 
logotypes or ligatures, so in cryptography, when combinations of two or more 
letters- are to be treated as a. unit in a cryptographic process, they may also 
be called ligatures and can be conveniently indicated as being so by placing a 
bar across the top of the combination. Thus, COp represents the digraph CO 
of the plain text. It will also be convenient to use the Greek letter 9 to 
represent a letter of the alphabet, without indicating its identity. Thus, 
instead of the circumlocution "any letter of the plain text", the symbol 0 p 
will be used;- and for the expression "any letter of the- cipher text", the 
symbol 9 e will be used. The symbol then means "any plain-text 'digraph"; 
the symbol 90 c , "any cipher-text digraph". To refer specifically .to the 
1st, .2nd, 3rd ... member of a ligature, the exponent 1, 2, 3 ... will be used. 

Thus,- 9^ of REMp is the letter E; ®c of XRZ 0 is Z. 



31* Polygraphie substitution by means of tables* - a_. The most simple 
method of effecting polygraphic substitution involves the use of tables sim- 
ilar to that shown in Table 1. .This table merely presents equiv alents for 
digraphs and is -to be^ employed upon the coordinate system, 9p of P*9p being 
sought in the column a t the - left or right, in the row at the top or bot- 
tom. The cipher pair, , is then found at the intersection of the row 

and column thus indicated. For example , AF p - YG 0 ; FHp - AZ 0 , etc. 




Initial letter (9: 
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_ A 

>-J ft B 
C 
D 



N 



X 

Y 



' . ' Table 1, 1 . 

(Showing only a partially filled table.) 



A 


B 


* 

c 


D 


E 


F 


Final letter (9p) 

G H r J IC 


X 


Y 


Z 




FX 


CH 


XE 


YY 


ZA 


YG 


FB 


CD 


sar 


XJ 


ZX 




EA 


DJ 


FH 


A 


NY 


DC 


NB 


ZI 


XX 


DX 






%. . 














B 








AH 








~AB 












m 




C 






BB 




, ya 










Ty 






3F 






D 


AX 










AI 




















E 




AG 






Jn2_ 






AZ 










“aa 






F 


• • 




-a 




• 

• 




*• ; 


■ ,a 


. e 




> 

• 


1 

m. 


• 

m 




BC 


1 CY I i ’ 




*** [ ' 


BA 


FE 


N 


• 

• l 




• 

• 


• 

• 


a 

• 




- 








MM 


. 




mm 


mm 


MM 






BE| 




X 


@31 








■B 




AF 


3 


B 








| AD 




’ Y 


AE 








L_J 






— . — 


w 


■ 






AKJ ' 




Z 


A 


“ b' 


c 


if 


i- 


~¥ 


“~cf 


H 


1 


j 


■ K 


X 


Y 


Z 





___ ’ b. The foregoing table is reciprocal in nature; that , is, AFp - YG C and 
YGp - AF C . Thus, a, single table sferves for enciphering as. well as for de- 
ciphering. The word pSFEND would be enciphered as YA HZ GY, and then grouped 
in fives:’ YANZC Y.«. . .. When a final single letters occurs, a null is added 
in order to make a pair of letters capable of being enciphered by the method. 
‘Reciprocity is, however, not ah essential factor and for greater security 
nonreciprocal tables are more advisable. In such cases an enciphering table 
must have dts complementary .deciphering table. 

c/ Until the amount of text enciphered by means of such a table becomes 
great”enough to disclose the cipher equivalents of the most frequently used 
digraphs, such as M, ER,. RE, TH, ON, etc.,' cryptograms based upon the table 
are relatively secure against solution. 

d. A simple- method for preventing the establishment of the frequencies 
characterizing these commonly used digraphs and thus eliminating the principal 
basis for their identification is given in Paragraph 52-e, Section XI. 

e_. The factor that contributes most to the relatively high degree of 
se curTty of - the digraphic method described, in subparagraphs a_ and b is the ab- 
sence of symmetry in’ the tqble employed ,. for this table is constructed by ran- 
dom assignment of values and shows no symmetry wha tsoeve r in it s arrangement 
of contents. lienee, even -if 9 ^ - In a first case of ©*©|j £ ©i©§ is identical 
with ©1 in a second case, ©1©? in the first base is wholly different from 
©1©2 in -the second case. For "example, ; Tahle 1 shows that AC p ” XE C and 
TFT z YY e ; the cipher resultants fail to give any hint that the plain-text 
pairs contain an identical letter. 
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f,. If, however, the latter is not the case and the table exhibits 
symmetry in its arrangement of contents, solution is somewhat facilitated. 
Note the following Table 2, for example, in which two mixed sequences are 
employed to form the cipher equivalents. One mixed sequence is based upon 
the keyphrase WESTINC&OUSE AIR BRAKE; the other, upon the keyphrase GENERAL 
ELECTRIC COMPANY. The word FIRE would be enciphered as KIQA. 

Table 2., .... 



SN TR 
TN IR 
IN NR 
NN GR 
car HR 
HN OR 
ON UR 
UN AR 
AN RR 
RN BR 
BN. KB 
KN CR 
CN DR 
DN IB 
IN JR 
JN LR 
LN IB 
MN RR 
HN QR 
QN TR 
TO XR 
XN YR 
TO ZR 
ZN m 
m m 

EN SR 



IA NL GC 
NAGL HC 
GAEL OC 
HA OL UC 
QA DL AC 
UA AL RC 
AA RL BC 
RA BL KG 
BA KL CC 
KA CL DC 
CA DL EC 
DA HL JC 
EA JL LC 
JA LL IjC 
LA ML. PC 
MA HL Q,C 
PA QI VC 
QA TL XC 
YA XL YC 
XA YL ZC 
YA ZL WC 
ZA WL EC 
WA EL SC 
EA SL TC 
SA TL IC 
TA IL NO 



- H I 
HT 01 
OT UI 
UT AI 
AT HI 
RT BI 
BT KE 
KT. Cl 
CT DI 
DT El 
ET JI 
JT LI 
LT MI 
MT PI 
PT QI 
QT VI 
VT XI 
XT YI 
YT ZI 
ZT WI 
HT El 
ET SI 
ST TI 
TT II 
IT NI 
NT GI 
GT HE 



J K L 
DO AM HP 
AO RM BP 
RO BM KP 
BO KM OP 
KO CM DP 
CO DM EP 
DO EM JP 
EO m DP 
JO' LM MP 
LO MM PP 
MO PM QP 
PO QM TP 
QO 7M XP 
VO XM YP 
XO YM ZP 
YO ZM WP 
ZO WM EP 
WO EM SP 
EO SM TP 
SO TM IP 
TO IM NP 
10 NM GP 
NO GM HP 
GO HM OP 
HO OM UP 
00 UM AP 



M N 
BY KB 
KY OB 
CY DB 
BY EB' 
BY JB 
JY LB 
LY MB 
MY PB 
PY QB 
QY VB 
VI XB 
XY YB 
YY ZB 
ZY IB 
WY EB 
EY SB 
SY TB 
TY IB 
rY is 
NY G3 
GY HB 
HY OB 
OY U3 
UY AS 
AY HB 
HY BB 



: Q E 

CD DE 
DD EF 
ED JE 
JDLE 
LD MB’ 
MD PE 
PD QE 
QD VE 
VD XE 
XD YE 
YD ZE 
ZD WE 
HD EE 
ED SF 
SD TF 
TD IE 
ID NE 
ND GF 
GD EF 
HD OF 
OD UE 
UD AE 
AD RF 
RD BE 
BD KF 
KD CE 



_a__R 

EH J J 
JH LJ 
LH MJ 
MH PJ 
PH.QJ 
QH V J 
VH XJ 
XH YJ 
YHZJ 
ZH W J 
WH EJ 
EH SJ 
SH TJ 
TH IJ 
IH N J 
NH GJ 
GH HJ 
HH OJ 
OH UJ 
UH AJ 
AH RJ 
RH BJ 
BH KJ 
KH CJ 
CH DJ 
DH E J 



STD 
IK MJ PS 
IK PQ QS 
PK OQ VS 
QK VO XS 
VK XO YS 
XK YO ZS 
YK ZO WS 
ZK HO ES 
HK EO SS 
EK SO TS 
SK TQ IS 
TK IQ NS 
IK NO GS 
NK GQ ns 
CSC HQ OS 
HK OQ US 
OK UO AS 
UK AO RS 
AIC RO BS 
HK 30 KS 
BK KO CS 
KK CQ DS 
GK DO PS 
DK FQ JS 
IK JQ LS 
JK LQ MS 



V W 
QD TV 
VD XV. 
XD YV 
YD ZV 
ZD. WV 
HD EV 

jxr sv 

SU TV 
TU IV 
IU NV 
ND GV 
GU HV 
HD OT 
OD UV 
DD AV 
AD RV 
RD BV 
BD KV 
ICD CV 
CD DV 
DD EV 
ED JV 
JD LV 
LD MV 
MJ PY 
PD QT ' 



A cursory examination of Table 2 shows that when 8p is identical 
^ cases then i s identical in these cases, so that in reality the 
encipherment is by no means truly digraphic in character. Described in 
cryptographic terms, the encipherment of e~ is polyalphabet io in character 
whereas that of 0^.is monoalphahetic, A more obvious picture of this con- 
dition is brought out in the following rearrangement of Table 2, 
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A 


B 


C 


D 


1 


F 


G 


H 


I 


J 


Ak 


L 


IJ 


IT 


0 


T> 




R 


S 


T 


u 


.Y. 


7 


X 


Y, 


z 


A 


¥ 


E 


S 


T 


I 


ir 


G 


H 


0 


U 


A 


R 


B 


~r 


c 


D 


F 


J 


L 


M 


p 


Q 


Y 


X 


Y 


z 


B 


E 


S 


T 


I 


N 


G 


H 


0 


U 


A 


R 


B 


— *• 
Ak 


c 


D 


F 


J 


L 


M 


P 


ft 


Y 


X- 


Y 


Z 


w 


C 


S 


T 


I 


11 


G 


H 


•0 


U 


A 


R 


B 


K 


'0 


D 


F 


J 


L 


M 


P 


Q 


Y 


X 


Y 


Z 


W 


E 


D 


T 


1 


N 


G 


H 


0 


u 


A 


H 


B 


K 


C 


D 


F 


J 


L 


M 


P 


Q, 


Y 


X 


Y 


Z 


W' 


E 


S : 


E 


I 


N 


G 


H 


0 


U 


A 


■ R 


B 


• rr 


C 


D 


F 


J 


L 


M 


P 


ft- 


V 


X 


Y 


Z 


¥ 


E 


S 


T 


F 


N 


G 


H 


0 


U 


A 


R 


B 


K 


c 


D 


F 


J 


L 


M 


. P 


Q, 


Y 


X 


Y 


.Z 


"W 


E 


S 


T' 


I 


G 


G 


H 


* 0 


U 


A 


R 


B 


K 


C 


D 


F 


J 


L 


M 


p 


Q. 


Y 


X 


Y 


Z 


7 


E 


S. 


T 


I 


N 


H 


H 


0 


u 


A 


R 


B 


T?* 

ik 


C 


D 


F 


J 


L 


Ti- 

ll 


P 


Q, 


Y 


X 


Y 


Z 


w 


E 


S 


T 


I 


N 


G 


I 


0 


U 


A 


R 


B 


X' 


c 


D 


F 


J 


L 


M 


P 


Q, 


Y . 


X 


Y 


Z 


w 


E . 


S 


T 


' I 


R 


G 


H 


J 


U 


A 


R 


B 


K 


C 


D 


F 


J 


L 


M 


P 


Q, 


Y 


X 


Y 


Z 


W 


E 


S 


T 


I 


N 


G 


H 


0 


K ‘ 


A 


R 


B 


X 


C 


D 


F 


J 


L 


M 


P 


Q 


V 


X 


Y 


Z 


W 


E 


S 
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ft 
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Z 
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N 


G 
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A 


R- 


B 
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C 


D 


F 
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Y 
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Y 


Z 
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N" 


G 
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C 


D 


F 
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L 


M 


P 


ft 


X 


X 


Y 


Z 


w 


E 


S 


T 


I 


N 


G 
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.0 


U 


A 


R 


B 


Ak 
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D 
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J 


L 
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P 


ft 
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Z 
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S 
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rr 
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D 


F 


J 


L 
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P 


ft 


V 


X 


2 


Z 


w 


E 


S 


T 


I 


IT 


G 


H 


0 


U 


_A 


R 


B 
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D 


F 


J 


L 


M 


P 


ft 


V 
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Y 
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L. 


C 
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F 


H’ 


J 


K 


Q 
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'u. 


v. 


w 


X 


Z 



h.. By a slight modification in arrangement, but with no change in basic* •= 
principle, the encipherment can be made monoalpliabetic, so far as gp is con- 
. cerned, and polyalphabet ic, so far as is concerned. Note Table 4, 
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Table' 4, 



£ 


* 


A 


B 


C 


D 


E 


F 


G 


H 


I 


J 


■ -# 

K 


< 

L 


M 


N 


0 


P 


Q, 


R 


S 


T 


U 


V 


w 


X 


Y 


z 


A 


w 


G 


E 


E 


R 


A 


L 


C 


T 


I 


0 


1.1 


p 


Y 


B 


D 


F 


H 


J 


E 


Q, 


s 


TJ 


V 


w 


X 


z 


B 


E 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


E 


Q 


s 


u 


V 


w 


X 


Z 


G 


d 


s 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


E 


Q 


S 


u 


V 


w 


X 


z 


G 


E 


© 


T 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


s 


u 


V 


w 


X 


z 


G 


E 


E 


E 


I 


.A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D ' 


F 


'H 


J 


K 


Q. 


S 


u 


V 


. w 


X 


z 


G 


E- 


E 


R 




E 


L 


0 


T 


1 


0 


M 


P 


Y 


B 


D 


•F 


H 


T 


E 


Q 


s 


u 


V 


w 


X 


•z 


G 


E 


E 


R 


A 


G. 


G 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


Ji 


Q 


3 


u 


V 


•w 


X 


. z 


G 


E 


E 


R 


A 


L 


r 


H. 


.T 


I 


0 


M 


P 


Y 


B 


D 


F 


,H 


J 


E 


Q, 


s 


u 


V 


w 


X 


z 


G 


E 


E 


R 


: A. 


L 


C 


$ 


Q 


I 


0 


M 


P 


Y 


B 


D 


F 


■H 


J 


E 


Q, 


s 


u 


V 


M 


X 


z 


G 


E 


E 


a 


A 


L 


C 


T 


? 


u 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


s 


u 


V 


w 


X 


z 


G 


E 


E 


a 


A 


L 


c. 


T 


I 


K 


A 


M 


P 


Y 


B 


D 


F 


H 


J 


K 


Q, 


s 


u 


V 


w 


X 


z 


G 


E 


N 


,R 


A 


1 


C 


T 


I 


0 


L . 


R' 


P 


Y 


B 


D 


F 


H 


J 


K 


Q 


S 


u 


V 


\r 


X 


z 
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■E 


N 


R 
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L 


C 
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0. 


M 


w 


B 


Y 


B 
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F 


H 


J 


K 


Q. 


s 


u 


V 


17 


X 


z 


G 


E 


E 


: R 


A 


L 


G 


T 


I 


0 


M 


P 


N . 


K 


B 


D 


F 


H 


J 


X 


Q, 


s 


u 


V 


;? 


X 


z 


G 


E 


E 


a 


A 


L 


C 


T 


I 


0 


M 


P 


Y 
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C 


D 


F 


H 


J 


X 


Q 


s 


u 


V 


w 


X 


z 


G 


E 


E 


R 


A 


L 


C 


T 


I 


0 


M 


P' 


Y 


B 


P . 


D 


F 


H 


I 


K 


Q 
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w 
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z 
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E 
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1 


IT 
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0 
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I 
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M 


P 
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T ’■ 


M 


Q, 
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u 
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w 


X 


z 
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E 
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a 
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0 
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Y 


B 
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J 


K 


TJ . 
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V 


i? 


X 


z 


G 


E 


N 


a 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


£> 


F 


II 


J ; 


E • 


a 


v 


Q 


u 


V 


M 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


E : 


Q 


s 


W‘ . 


V 


V 


f 


X 


z 


G 


E 


N 


R 


A 


L 


C 


T 


I 


0 


M 


P 


Y 


B 


D 


F 


H 


J 


E 


•a 


S 


u 


X 


X 


w 


X 


z 


G 


E 


IT 


R 


A 


L 


c 


T 


I 


0 


M 


p 


Y 


B 


D 


F 


H 


J 
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z 
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T 


I 
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i.i 


P 
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J 


iv 


Q 
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i ' 
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71 


G 


E 


N 


a 


A 


L 


C 


T 


I 


0 
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? 


Y 


B 


D 


F 


H 


J 


K 


Q 


s 


U 


V 


W- 


X 



ju The results given by Table 3 or Table 4 may be duplicated by using 
. sliding alphabets, as shown in Figs. 32 and 33. In the former, which corresponds 
to Table 3, Alphabets I and IV are. fixed, II and III are mounted upon the sam e 
strip, which is movable. To use these alphabets in encipherment, Qg of is 

located on Alphabet II and Alphabets II-III are s hifted so that 8^ is beneath A 
on Alphabet I; 9Z is now sought in Alphabet I and will be found under it on 

Alphabets III ana IV, respectively. Thus, for the. word FIRE the successive posi- 
tions of the alphabet strips -are as shown below, yielding the cipher resultant. 
KIQ&. • ■ ' 

I - A B C D E F G -H I J K L' M N 0 P Q R S T U V W XYZ- - Fijced alphabet 

alphabet 
alphabet 



n :n c 

V p c 



II - F G H I JKLMNO ?Q,RSTUVWXYZABC D El 
III-NGHOUARBECDFJLHPQVXYZWESTIj 
IV-GENRALCTI0MPY3DFHJEQSUVWXZ-- Fixed 




I-ABCDEFGHIJELMN0PQRSTUVT7XYZ- 
^7- II-HSTUVUXYZABCDSIGHIJILMSOPq] 
III - JLMPQVXYZT72 ST IEGHOUARBEC DF/ 
IV -GEERALCT I 0MPI3 DFHJICQ,SUV T JXZ- 



- Fixed alphabet 
Movable alphabet 

- Fixed alphabet 



Fig. 32 
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J_. To correspond with Table 4 the alphabet strips are arranged as. shown 
. in Fig. 33-.. Here Alphabets I and II are fixed, III and IV are mounted upon 
. the same movable strip# To use these alphabets in encipherment, 0^ of glg^ is 
locate don Alphabet IV and Alphabets III -IV are shifted, so tha t Qg Up) is^be- 
heath A on Alphabet I; ®p (?„) is now sought in Alphabet I and will be 
found under it on Alphabets II and III, respectively. Thus, for thS word FIHE, 
the successive positions of the alphabet strips are as shown below, yielding 
the- cipher resultant NBJtT, 



I - AB C D E F G H I JKLMNOPQRSTNVWXYZ*-- Fixed alphabet 
r .II-WESTINGHOUARBKCDFJLMPQVXYZ-- Fixed alphabet 
° III -10 MPYB DFH JK QSUVWXZ 5IHBALCT} . ' ' . . 

IV - I J K L M N 0 P Q R S T U V W X Y Z A B 0 D E F G Hj Jfovable alphabet 



I-ABCD3FGHIJKLMN0PQRSTUVWXYZ- 

II - WEST IH.8HO0A R. B, K.Cl P I T L M P Q V X Y Z - 

MSp Z III-A LC T.1,0 MPY3 DjIHisutllZ GENH\ 
IV - E F G H I J K L M N 0 ! P Q, R S T U V W X TZABOD; 



- Fixed alphabet 

- Fixed alphabet 

Movable alphabet 



Fig. 33 • 



k. Neither Table 3it>r Table 4 presents the possibilities such tables 
might afford for di graphic aibstitution. They inay, however, be rearranged so 



as to give results that will approach mere closely to the desired ideal as to 
nonrelationship between cipher equivalents of plain-text pairs having an iden- 
tical letter in common .'Note that in Table 5, which is based upon the same 
primary alphabets as Table 3 and Table 4, the cipher equivalents are the same 
as in the latter tables, but they have been so distributed as to eliminate 
the undesirable and externally obvious relationship referred to . (In any table 



of this nature there can be only 676 different pairs of equivalents, since the 
table presents merely the 'permutations of the 26 letters taken twoafc a time. 



It is the distribution of the pairs which is important.): 






-RE-F — ED-4-A5-&93-Q 
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Table 5. 



A 

"B 

C 

D 

E 

F 

G 

' ' ' H 
. v I 
J 
K 
L 

N 
. 0 

P 

» 

ft' 

R 

S 

T 

U 

Y 
W 
X 

Y 



.A 


B. 


C 


D. 


E . , 


F 


G . 


5 


I 


J 


?■ 


L 


3 ' 
P ■ 
M. 


N,. 


.0 


P 


ft 


R 


s 


T . 


U. 


Y 


w 


X 


Y 


Z 


W 


E 


S . 


T 


.1 


N 


G 


R. 


0 


U 


A 


R 


B; 


K‘ 


c 


D 


F 


J 


L . 


M 


P 


ft 


V 


X 


Y 


Z 


:Z 


X 


•W 


V 


U 


S 


ft 


E 


J 


Hi 


F. 


D 


B 


Y 


■,p 


M 


o 


I 


T 


C 


L 


A 


.R 


N 


. E 


G 


KB 


PI 


E3B 


a 


a 


G 


R 


9 • 


u 


A 


R 


B. 


K 


a 


D 


F 


m 


I* 


M 


P 


ft 


a 


a 


a 


Z 


w 


ntj 


10 


m 


Kjj 


IB 


■U 


S 


ft 


K 


•J 


H 


F 


D 


NS 


Y 




BA! 


KJ 


mi 




ma 


■a 




So 


N 


E 


KTJ 


E9 


a 


a 


a 


a 


a 




m 


El 


raj 


a 


a 


D 


F 


a 


a 


a 


a 


a 


a 


X 


9 


z 


.¥ 




E| 


m 


m 


IB 


IB 


MS 


NS 




a 


a 


MS 


IB 


NS 


D 


B 


IS 


E9 


IB 


a 


MS 




m 


Es 


E9 






K1 








H. 


0 


u 


a 


H 


a 


K 


a 


e m 


F 


J 


L 


M 


p 


a 


a 


X 


a 


a 


a 




S 


Ki 




IS 


z 


X 


¥ 


V 


a 


13 


IS 


K 


m 


H 


F 


D 


B 


Y 


p 


m 




m 


ME3 


1*3 


S3 




R 


n 


N 


a 


H 


0 


U 


a 


a 


B 




C 


a 


a 


J 


L 


M 


a 


ft 


Y 


a 


a 


z 


w 


E 


S 


T 


R 


'N 


E 


-G 


z 


X 


IS 


a 


U 


s 


ft 


a 


m 


H 


F 


D 


89 


Y 


P 


Ki 


m 


■i 


T 


S3 


■9 


E3 


N 


El 


t£ M 


a 


u 


a 


a 


B 


a 


a 


D 


a 


a 


a 


m 


P 


q 


Y ■ 


X 


Y 


Z- 


"W 


E 


a 


a 


y| 


A 


IS 


KI 


NS 


G 


IB 


X 


W 


a 


US 


S 


a 


IB 


Ej 


IS 


F 


D 


B 


1 Y 


P 


M 


Q 


1 


E3 


a 


S3 


n 


El 


El 


a 


a 


ES 


B 


K 


a 


a 


a 


a 


a 


M 


a 


ft 


a 


X 


Y 


Z 




E 


S 


a 


a 


N 


■9 


H 


R 


IS 


IS 


G 


Z 


X 


a 


m 




m 


80 


K 


m 


H 


KI 


D 


B 


Y 


p 


M 


0 


■a 


a 


C 


o 


EB 


u. 


A 


R 


B 


K 


a 


a 


if" 


a 


a 


M 


a 


ft. 


a 


a 


a 




W 


E 


S 


T 


i 


N 


G 


m 


Sa 


A 


■R 


N 


E 


G 




X 


w 


a 


a 


S 


Sr 


K 


n 


MS 


a 




B 


Y 


. P- 


M 


0 


i 




0 


El 


a 


a 


B" 


a 


G 


a 


F, 


a 


a 


m 


P 


ft 


a 


X 1 


a 


a 


¥- 


E 


S 


T 


I 


N 


Gr 




T 






H 


R 


89 


E 


G 


Z 


m 


Kj 


a 


u 


s 


83 


K 


MS 


H 


F 


D 


B 


Y 


P 


M 


SSI 




TJ 


a 


R 


B 


■K 


a 


D 


F 


J 


a 


M 


a 


a 


Y 


a 


a 


Z 


W 


a 


a 


a 


I 


a 


G 


a 


0 


I 


Ea 


C 


L 


A 


R 


N 


E 


G 


z 


X 


w 


19 


n 


m 


a 


K! 


J 


89 


Fl 


MB 


B 


E 


BO 


EH 


0 


El 




B 


K 


C 


D 


a 


a 


a 


m 


a 


a 


a 


X 


Y 


z 


IM 


E 


S 


a 


i 


N 


a 


H 


a 


yj 


■H 


i 


T 


C 


L 


A 


83 


8 


a 


a 


a 


m 


ml 


Y 


U 


s 


MS 


K 


E 


89 


F 


D 


8>' 


Y 


8 


S3 


El 


E9 


K 


C 


a 


F, 


a 


a 


M 


p 


a 


a 


X- 


a 


z 


w 


E 


a 


a 


a 


N 


G 


a 


0 


a 


a 


H3 


no 


I 


T 


IB 


L 


H 


a 


-IT 


E 


a 


m 


X 


IS 


Y 


u 


S 




IS 


ra 


H 


F 


E3 


B 


Ea 


Bo 


■B 


E9 


C 


a 


a 


a 


a 


a 


P 


ft 


a 


E3 


Y 


a 


m 


a 


a 


T 


a 


a 


G . 


R . 


a 


a 


A 


R 


P 


M. 


0 


81 


El 


IB 


IB 


a 


R- 


N: 


E 


G 


z. 


81 


H 


BS 


TL 


S 


El 


m 


J 


H 


El 


83 


B 


Y 


Z 


19 


X 


a 


q. 


a 


a 


a 


m 


F 


D 


G 


a 


B 


R 


A 


a 


a 


H 


a 


a 


a 


T 


s 


E 


W 


Z 


IB 


E 


89 


R 


A 


19 


a 


a 


I 


0 


M 


89 


Y 


B 


D 


Es 


83 


J 


IS 


MS 


m 


U 


Y 


¥ 


X 


Ea 


a 


Y, 


a 


?■ 


M. 


a 


a 


m 


D 


0 


K 


B 


a 


A 


U . 


a 


a 


G 


N 


i 


a 


S 


E 


W 


a 


WF 


10 


G 


IB 


N 


R 




83 


c 


,T 


I 


0 


.M 


89 


Y 


B 


m 


MS 


H 


J 


IC 


R 


El 


_u 


V 


B 


X 


a 


a 


a 


ga 


a 


a 


eh 


a 


a 


a 


B 


R 


a 


a 


a 


a 


G 


a 


a 


T 


s 


a 


¥ 


2 


a 


. w 


8 


IB 


IB 


SI 


IB 


IB 


A 


a 


a 


a 


I 


Q 


13 


E9 




89 


D 


89 


89 


J 


K 


a 


EJ 


S3 


89 


19 


ft 


a 


M 


a 


m 


a 


a 


a 


a 


B 


R 


A 


u- 


a 


ea 


a 


N 


a 


T 


S 


E 


a 


a 


a 


X 


IB 


w 


EJ 


Z 


IB 


IB 


19 


a 


a 


a 


C 


T 


I 


0 


IB 


E3 


B 


B 


89 


F 


H 


J 


83 


El 


83 


u 


ft 


p 


M 


L 


a 


F 


D 


a 


a 


a 




A 


U 


a 


a 


G 


a 


I 


T 


a 


E 


¥ 


z 


a 


a 


Y 


TJ 


V 


W 


X 


IB 


G 


E 


8 


a 


a 




C 


T 


a 


a 


M 


NS 


X 


B 


B9 


F 


H 


J 


E 


MS 


s 


P 


M 


a 


a 


m 


D 


C 


a 


'B 


a 




TJ 


0 


H 


G 


a 


i 


a 


S 


E 


¥ 


Z 


a 


X 


a 


ft 


S 


U 


83 


Ej 


X 


Z 


G 


a 


N 


R 


A 


L 


c 


T 


I 


MS 


M 


89 


Y 


B 


D 


F 


83 


Jj 


83 


ft 


M 


El 


a 


F 


D 


c 


K 


B 


a 


a 


TJ 


0 


H 


G 


N 


i 


T 


s 


E 


W 


Z 


Y 


X 


a 


a 


p 


ft 


m 


83 


Y 


w 


X 


Z 


G 


a 


a 


R 


A 


L 


C 


T 


i 


0 


M 


P 


Y 


B 


D 


F 


83 


EJ 


K 


K9 


a 




D 


G 


IC 


B 


R 


m 


a 


0 


H 


G 


a 


I 


T 


3 


E 


¥ 


Z 


m 


X 


a 


ft 


a 


M 


■3 


IB 


s 


U 


Y 


w 


X 


Z 


G 


a 


N 


2 


A 


83 


C 


T 


I 


0 


M 


P 


Ea 


B 


83 


F 


83 




19 


F 


a 


C 


K 


a 


R 




a 


a 


H 


G 


a 


a 


a 


S 


E 


a 


Z 


a 


X 


i 


q 


P 


M 




M 


K 


Hi 


S 


U 


89 


¥ 




a 


a 


E 


N 


89 


n 




C 


T 


m 


0 




p 


B 


B 


D 


SI 






D 


m 


K 


B 


R 


a 


U 


0 


H 


G 


N 


I 


a 


s 


E 


¥ 


z 


a 


X 


V 


ft 


P 


M 


a 


J 


H 


J 


K 


ft 


S 


U 


K9 


¥ 


X 


Z 


G 


E 


N 


83 


A 


L 


C 


T 


E 


0 


M 


p 


Y 


B 


83 


F 


D 




K 


B 




a 


u 


0 


H 


G 


a 


I 


T 


s 


E 


W 


z 


a 


X 


a 


ft 


p 


M 


m 


a 


F 


F 


83 


J 


K 




83 


u 


V 


W 


X 


MB 


G 


E 


R 


R 


A 


L 


a 


T 


m 


0 


M 


P 


B 


83 


D 


C 


K 


B 


R 




a 


0 


H 


G 


N 


i 


T 


S 


E 


W 


Z 


Y 


X 


a 


ft 


p 


M 


L 


j 


F 


D 


D 


F 


H 


J 


K 




s 


U 


Y 


W 


X 


Z 


G 


1 


N 


R 


A 


L 


83 


T 


I 


0 


M 


p 


Y 


B 


K 


B 


R 


a 


U 


0 


H 


G 


Q| 




T 


S 


a 


¥ 


Z 


Y 


X 


a 


ft 


P 


M 


a 


a 


F 


D 


C 


B 


D 




E 


J 


K 


i 


S 


D 




W 


X 


B 


JL 


E 


N 


R 


83 


L 


C 


T 


E 


83 


M 


P 


Y 



Z 









































































































































































































































































































































































REF ID : A5 6 93 0 



- 43' - 



■ 1. Table 5 -at ill shows symmetry in its -const riicti'oh/-- flftd a suspicion of 
its existence formed .{Luring the preliminary stages of cryptanalysis, would aid 
materially in hastening final solution. " . 

m. The foregoing tables have all been 'digfaphic in nature, but a kind 
of false trigraphic substitution. may be also accomplished by means of such 
tables, as illustrated in the accompanying Table 6, which is the same as 
Table 5 with the addition -of one more alphabet at the top of the table... 
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n. In using this table, 9p is located in'Alphebet I,, and its equivalent. 

Op, taken from Alphabet" II;' e| is located in. Alphabet III, and its equivalent, 0 
taken from Alphabet IV;- *0® is the letter lying at the intersection of the row 
indicated by Op in- Alphabet. I. and- the column determined. by 0p. Thus, FIRE LIMES 



It is obvious, however, that only the en- 

.1 — J r\Z 



would be enciphered HITS! : IEft'. KQV 

cipherment of 0^ is po lyalphubatic In ■ character y-0£ and 0 
monoalphabet ioally. Various : Other' agreements m y-& 



are enciphered purely 
e made^with respect to the 



alphabets in which the pic in-.t ext % ■ le.t t e r will be sought in such a table, but 
the basic cryptographic principles are the same as in the case described; 



n o 
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o*. Digraphic tables employing numerical equivalents instead of letter 
equivalents are , Of source, possible" but- in. this: case. -the number of equivalents 
required, 676j'‘n»ans’th&t Cfin&inatipns of three i'igtcped, muart. be used';- ■» 



7 '. — 



■ • ••/' -SECTION nil;-. - 

txU-a i-u 7 -•■ •CHECK3BBQASD DIGERAHilG .’l^STITtn'iaN.. ' '■ 

lo B.V 5 "-.: . ■ 

Disadvafttag^^of 'large 'table s ,« .« ...... 

Four-alpfi&cet checkerboards 

Twp-alphabot checkerboards i..., — ,. 

One-alphabet checkerboards'-.. . ; . . ......... . 

'I' Rect angul ar., designs,,..*. . . . ..... ....... ............ ., .. . . ...... .... ...... 

Combined- alphabetical and numerical checkerboard* .......... ... 



Paragraph 

32 

33 
V 34 

. 35'; 

36 

V. 37 ■*' ’! 



- Di sadvcmt age s of largo tables,. - .Digraphic substitution by means! of 

tables such", as those illustrated, in Tables 1, 2; and 5, is impractical for ■ 
military use on account of. the relatively- large size that the table takes, and 
1 the inconvenience in their production,^ change, distribution and handling. . yust 
as it has beon noted in Special Text 165, Elementary Military Cryptography,'' 
Section XEI, that simple sliding alphabet, strips can replace largo quadrieijlap 
tables, so it will .bo found that' small designs 'similar to a checkerboard cin , . 
replace -the large quadriculnr tables in digraphic, substitution. Although the 
' usual chess or checkerboard is based on a square 8x0, with 64 cells, the ! term 
checkerboard will here, be used to designate any square design with n 2 cells. 

33. Pour-alphabet checkerboards . r. a. The simple or single-alphabet 
checkerboard consists of a. square 5x 5, containing 25 cells in which the ■ 
letters of a 25-slement alphabet (I end J being interchangeable) are inserted 
in any prearranged order. When four such checkerboard alphabets are arranged 
in a larger square as. shown in Fig, 34, the latter may be employed for digraphic 
substitution to yield the same cipher resultants as does tho much larger Table 1 
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